cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1427
Views
5
Helpful
4
Replies

How to manage ASA 5506x NGFW

petpkcui1
Level 1
Level 1

Hi everyone,

- This is the first time i have setup ASA 5506x FW. I had read some documents that i can connect my PC to interface G1/2 on FW and access https://192.168.1.1 to install ASDM. But after connect to G1/2 on FW, i had no ip address.

- I have showed run on ASA and i saw that all interfaces is shutdown. This mode supply very limit command and i can't go to config mode to type "no shut" command.

- Please helpme resolve this issue.

 

Many Thanksshowrun.PNG

 

1 Accepted Solution

Accepted Solutions

I think that you should use the management interface instead (which is not in shutdown state but have no ip address).

This link should be helpful : https://www.cisco.com/c/en/us/td/docs/security/firepower/quick_start/5506X/ftd-fdm-5506x-qsg.html

 

View solution in original post

4 Replies 4

Hamdi Kadri
Level 1
Level 1

Can you include the whole "show running-config" & "show version" output ?

Hi Hamdi,
This is output commands:
************************************
firepower# show run
firepower# show running-config
: Saved

:
: Serial Number: JAD212706WT
: Hardware: ASA5506, 4096 MB RAM, CPU Atom C2000 series 1250 MHz, 1 CPU (4 cores)
:
NGFW Version 6.2.0
!
hostname firepower
enable password $sha512$5000$P7bp+MraWYezq72EgkMOLQ==$ZlxWxrf17XxNEbw1z9FIjg== pbkdf2
names

!
interface GigabitEthernet1/1
shutdown
no nameif
no security-level
no ip address
!
interface GigabitEthernet1/2
shutdown
no nameif
no security-level
no ip address
!
interface GigabitEthernet1/3
shutdown
no nameif
no security-level
no ip address
!
interface GigabitEthernet1/4
shutdown
no nameif
no security-level
no ip address
!
interface GigabitEthernet1/5
shutdown
no nameif
no security-level
no ip address
!
interface GigabitEthernet1/6
shutdown
no nameif
no security-level
no ip address
!
interface GigabitEthernet1/7
shutdown
no nameif
no security-level
no ip address
!
interface GigabitEthernet1/8
shutdown
no nameif
no security-level
no ip address
!
interface Management1/1
management-only
no nameif
no security-level
no ip address
!
boot system disk0:/os.img
ftp mode passive
ngips conn-match vlan-id
pager lines 24
no failover
no monitor-interface service-module
icmp unreachable rate-limit 1 burst-size 1
no asdm history enable
arp timeout 14400
no arp permit-nonconnected
arp rate-limit 16384
timeout xlate 3:00:00
timeout pat-xlate 0:00:30
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 sctp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
timeout floating-conn 0:00:00
timeout conn-holddown 0:00:15
timeout igp stale-route 0:01:10
user-identity default-domain LOCAL
no snmp-server location
no snmp-server contact
service sw-reset-button
crypto ipsec security-association pmtu-aging infinite
crypto ca trustpool policy
telnet timeout 5
console timeout 0

dynamic-access-policy-record DfltAccessPolicy
!
class-map inspection_default
match default-inspection-traffic
!
!
policy-map type inspect dns preset_dns_map
parameters
message-length maximum client auto
message-length maximum 512
no tcp-inspection
policy-map global_policy
class inspection_default
inspect dns preset_dns_map
inspect ftp
inspect h323 h225
inspect h323 ras
inspect rsh
inspect rtsp
inspect sqlnet
inspect skinny
inspect sunrpc
inspect xdmcp
inspect sip
inspect netbios
inspect tftp
inspect ip-options
inspect icmp
inspect icmp error
!
service-policy global_policy global
prompt hostname context
call-home
profile CiscoTAC-1
no active
destination address http https://tools.cisco.com/its/service/oddce/services/DDCEService
destination address email callhome@cisco.com
destination transport-method http
subscribe-to-alert-group diagnostic
subscribe-to-alert-group environment
subscribe-to-alert-group inventory periodic monthly
subscribe-to-alert-group configuration periodic monthly
subscribe-to-alert-group telemetry periodic daily
Cryptochecksum:06b892cb66e30a7f9ae0a7e14edd0f46
: end

******************************
firepower# show version
-------------------[ firepower ]--------------------
Model : Cisco ASA5506-X Threat Defense (75) Version 6.2.0 (Build 363)
UUID : 93b48db8-6433-11e7-8d87-ba1aceb1cfc5
Rules update version : 2016-03-28-001-vrt
VDB version : 271
----------------------------------------------------

Cisco Adaptive Security Appliance Software Version 9.7(1)4
Firepower Extensible Operating System Version 2.1(1.66)

Compiled on Fri 31-Mar-17 07:44 PDT by builders
System image file is "disk0:/os.img"
Config file at boot was "startup-config"

firepower up 4 mins 5 secs

Hardware: ASA5506, 4096 MB RAM, CPU Atom C2000 series 1250 MHz, 1 CPU (4 cores)
Internal ATA Compact Flash, 8000MB
BIOS Flash M25P64 @ 0xfed01000, 16384KB

Encryption hardware device : Cisco ASA Crypto on-board accelerator (revision 0x1)
Number of accelerators: 1

1: Ext: GigabitEthernet1/1 : address is 500f.8073.8f84, irq 255
2: Ext: GigabitEthernet1/2 : address is 500f.8073.8f85, irq 255
3: Ext: GigabitEthernet1/3 : address is 500f.8073.8f86, irq 255
4: Ext: GigabitEthernet1/4 : address is 500f.8073.8f87, irq 255
5: Ext: GigabitEthernet1/5 : address is 500f.8073.8f88, irq 255
6: Ext: GigabitEthernet1/6 : address is 500f.8073.8f89, irq 255
7: Ext: GigabitEthernet1/7 : address is 500f.8073.8f8a, irq 255
8: Ext: GigabitEthernet1/8 : address is 500f.8073.8f8b, irq 255
9: Int: Internal-Data1/1 : address is 500f.8073.8f83, irq 255
10: Int: Internal-Data1/2 : address is 0000.0001.0002, irq 0
11: Int: Internal-Control1/1 : address is 0000.0001.0001, irq 0
12: Int: Internal-Data1/3 : address is 0000.0001.0003, irq 0
13: Ext: Management1/1 : address is 500f.8073.8f83, irq 0
14: Int: Internal-Data1/4 : address is 0000.0100.0001, irq 0

Serial Number: JAD212706WT
Configuration register is 0x1
Image type : Release
Key Version : A
Configuration has not been modified since last system restart.
firepower#

*******************************
firepower# dir

Directory of disk0:/

80 -rwx 107035120 14:45:06 Mar 31 2017 os.img
81 -rwx 47 23:31:16 Nov 02 2017 .boot_string
82 -rwx 150382 23:14:22 Jul 08 2017 install.log
15 drwx 4096 23:46:18 Jul 08 2017 log
83 -rwx 321644 23:47:08 Jul 08 2017 crashinfo_20170708_234703_UTC
21 drwx 4096 23:51:34 Jul 08 2017 crypto_archive
22 drwx 4096 23:51:42 Jul 08 2017 coredumpinfo

7366520832 bytes total (7258435584 bytes free)

firepower#

******************************************
firepower# show boot

BOOT variable = disk0:/os.img
Current BOOT variable = disk0:/os.img
CONFIG_FILE variable =
Current CONFIG_FILE variable =
firepower#

I think that you should use the management interface instead (which is not in shutdown state but have no ip address).

This link should be helpful : https://www.cisco.com/c/en/us/td/docs/security/firepower/quick_start/5506X/ftd-fdm-5506x-qsg.html

 

Hi Hamdi, Thanks for help, i've resolve my issue.
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card