cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2753
Views
5
Helpful
35
Replies

Can't Connect to Console

msenior73
Level 1
Level 1

I'm trying to access our ASA 5512-X via the Management port, but the address https://192.168.1.1/admin can't be displayed.

Any ideas on how I can fix this?

Thanks.                  

1 Accepted Solution

Accepted Solutions

You have to be on configuration mode

config te

ssl encryption aes128-sha1 3des-sha1

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

View solution in original post

35 Replies 35

Julio Carvajal
VIP Alumni
VIP Alumni

Hello,

Have you configured HTTPS access via that interface?

Regards

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

I just took it out of the box and connected a computer to it and tried what the instructions listed.

Okay,

It's your computer on the same subnet than the ASA?

Do you have a console cable that you could use to connect to the box

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

The computer got an IP from the firewall:

192.168.1.3

Subnet: 255.255.255.0

DHCP: 192.168.1.1 (firewall)

Hello Michael,

Okay, got it. That's good,

It might be a problem with the SSL certificate or trustpoint being provided by the ASA

Can you connect via console to the box so I can provide you some commands?

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

I have the console cable connected...how do I interface with it?

http://www.freeccnaworkbook.com/workbooks/ccna/connecting-to-a-cisco-device-via-console

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

I found a program and am currently connected to it. Please let me know which commands I should run.

Show SSL

Provide the results

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

Accept connections using SSLv2, SSLv3, or TLSv1 and negotiate to SSLv3 or TLSv1

Start connections using SSLv3 and negotiate to SSLv3 or TLSv1

Enabled cipher order: des-sha1

Disabled ciphers: 3des-sha1 rc4-md5 rc4-sha1 aes128-sha1 aes256-sha1 null-sha1

No SSL trust-points configured

Certificate authentication is not enabled

Add the following to make it work

ssl encryption aes128-sha1 3des-sha1

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

Error: % Invalid input detected at '^' marker:

ssl   (under the l in ssl)

   ^

You have to be on configuration mode

config te

ssl encryption aes128-sha1 3des-sha1

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

Woo hoo!!! It works!!

Thank you so much for your help with this!!! It is truly appreciated.

Review Cisco Networking for a $25 gift card