ASA 5505 Username and Password

[carterw65]

Hi All,

I am trying to configure an ASA 5505 with a username and password. I set all the pass words:

password xxxxxxx

enable password xxxxxxx

username xxxxxx password xxxxxxx

When I reload the device it prompts me for the username, then the password and it fails and just asks for the username again. I have even tried to delete the username/password combo but it still prompts me for it. When I do password recovery the confreg is 0x00000001. I am no ASA expert and this is getting a bit frustrating.

When I first configured the device and reloaded it, everything worked fine.....once. Upon the second reload it just keeps prompting me.

Thanks for any help.

Bill

[Julio Carvajal]

Hello,

Please follow the next document

https://supportforums.cisco.com/docs/DOC-20027

This will do it for you,

Regards,

[Jennifer Halim]

Do you also have the following configured?

If you are trying with ASDM:

aaa authentication http console LOCAL

If you are trying with SSH/telnet:

aaa authentication ssh console LOCAL

aaa authentication telnet console LOCAL

[carterw65]

I have already tried password recovery several times with no luck, it still locks me out.

Jennifer, I do have the aaa configured for http, console, ssh, and telnet.

Thanks for the help

[Julio Carvajal]

Hello Carter,

I mean but you cannot access the   ASA correct??

Then when you get into rommom mode and load the image on the configuration register specified are you able to get to the asa configuration mode??

Regards,

[carterw65]

No, I can access it through password recovery. I reset all the passwords and it still locks me out when I reset the registery and reload the ASA. The only thing that I can figure is the confreg setting I originally had is wrong. Before I did password recovery I checked it to set it back the way it was. Perhaps the way it was is wrong to begin with. This is a loaner ASA I have to test out.

Thanks

Bill

[Julio Carvajal]

Hello Carter,

Hmm, it sounds like a config-register problem.

So when you are in rommon you got to set the confreg to be on 0x41 so you can ignore the startup-config.

Then when you enter to the ASA please do the following:

enable password cisco

username password cisco

config-register 0x01

wr

and then finally reload,

Regards,

Julio