can't access asa5510

[gerardobrien]

Hi all..

I'm having a problem with an ASA firewall..

When i web browse to the ASA i get the certificate warning page, when i click to continue to the website it loads the normal "this page cannot be displayed"..

I use to have the ASDM software on my computer to manage the device however its been uninstalled now.. can this be downloaded somewhere?

i have already tried upgrading the asdm and asa files on the asa?

any ideas?

cheers for any help in advance!

Gerard

[Maykol Rojas]

Hi,

If you have CLI access we need the following commands:

sh run asdm

sh flash

sh version 

It seems like you dont have a valid image of ASDM on flash to start ASDM. 

Let me know.

Mike

[gerardobrien]

Hi Mike,

Thanks very much for getting back to me!

I have copying across a new asdm file to flash, i rebooted the firewall and tested and i was still unable to access it.

Have a look a the commands below

EBEASA# show run asdm
asdm image disk0:/asdm-61551.bin
asdm location EastBelfast 255.255.255.0 Inside
asdm location VoiceServer 255.255.255.255 Inside
asdm location CityEastServer 255.255.255.255 Inside
asdm location 86.17.10.84 255.255.255.255 Inside
asdm location UPC-Server-One 255.255.255.255 Inside
no asdm history enable

EBEASA# sh flash
--#--  --length--  -----date/time------  path
    75  8192        Jan 15 2009 12:03:28  log
    79  8192        Aug 30 2008 14:46:14  crypto_archive
   148  13934592    Aug 24 2011 20:08:27  asa805-k8.bin
   146  89          May 19 2009 13:25:30  dap.xml
   147  16280544    Aug 24 2011 19:35:46  asdm-645.bin

255426560 bytes total (224731136 bytes free)

EBEASA# sh ver

Cisco Adaptive Security Appliance Software Version 8.0(4)

Compiled on Thu 07-Aug-08 20:53 by builders
System image file is "disk0:/asa804-k8.bin"
Config file at boot was "startup-config"

EBEASA up 4 days 13 hours

Hardware:   ASA5510, 256 MB RAM, CPU Pentium 4 Celeron 1600 MHz
Internal ATA Compact Flash, 256MB
BIOS Flash M50FW080 @ 0xffe00000, 1024KB

Encryption hardware device : Cisco ASA-55x0 on-board accelerator (revision 0x0)
                              Boot microcode   : CN1000-MC-BOOT-2.00
                              SSL/IKE microcode: CNLite-MC-SSLm-PLUS-2.03
                              IPSec microcode  : CNlite-MC-IPSECm-MAIN-2.05
  0: Ext: Ethernet0/0         : address is 0022.557e.ac6c, irq 9
  1: Ext: Ethernet0/1         : address is 0022.557e.ac6d, irq 9
  2: Ext: Ethernet0/2         : address is 0022.557e.ac6e, irq 9
  3: Ext: Ethernet0/3         : address is 0022.557e.ac6f, irq 9
  4: Ext: Management0/0       : address is 0022.557e.ac6b, irq 11
  5: Int: Not used            : irq 11
  6: Int: Not used            : irq 5

Licensed features for this platform:
Maximum Physical Interfaces  : Unlimited
Maximum VLANs                : 100
Inside Hosts                 : Unlimited
Failover                     : Active/Active
VPN-DES                      : Enabled
VPN-3DES-AES                 : Enabled
Security Contexts            : 2
GTP/GPRS                     : Disabled
VPN Peers                    : 250
WebVPN Peers                 : 2
AnyConnect for Mobile        : Disabled
AnyConnect for Linksys phone : Disabled
Advanced Endpoint Assessment : Disabled
UC Proxy Sessions            : 2

This platform has an ASA 5510 Security Plus license.

Configuration register is 0x1
Configuration has not been modified since last system restart.

Thanks for having a look Mike!

Anyone else have any ideas too?

Thanks

Gerard

[varrao · Accepted solution]

Hi,

As you can see:

EBEASA# show run asdm

asdm image disk0:/asdm-61551.bin

147  16280544    Aug 24 2011 19:35:46  asdm-645.bin

is not correct, you first need to do:

no asdm image disk0:/asdm-61551.bin

and then:

asdm image disk0:/asdm-645.bin

and then try to access, it should work fine.

Thanks,

Varun

[varrao]

Just for future use, you can use these docs:

http://www.cisco.com/en/US/docs/security/asa/compatibility/asamatrx.html

and also image upgrade:

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a008067e9f9.shtml

Hope this was helpful.

Thanks,

Varun

[gerardobrien]

Hurray!!!

Thanks a million.. done this and it has worked!

Thanks again!

[varrao]

Glad it worked

Thanks,

Varun