ASA 5505 new password not going into effect.

[amdc42970]

I'm trying to change the login password and enable password for our cisco asa 5505. Both commands "passwd" and "enable password" finishes successfully without any errors. After we save the configuration, exit and try to login back again, only the old password works. Please help.

[Karsten Iwen]

The password configured with "passwd" is the Telnet-password that is typically not used any more.

The password configured with "enable password" is used when you change to privileged mode, but is not used to log in to the ASA. How do you login? With username/password? Then you have to look at your "username" statements. Or do you have a central authentication-server? If that is used, then it could be that the local passwords are not used.

[amdc42970]

Thank you for youre reply. After changing the password, I did try logging in using telnet. Only the old password worked.

I login with a username and password. How do I find out if the ASA is using a central authentication-server?

[Karsten Iwen]

When you use a username to login, then the "passwd" is not used. If your username is not locally configured, then it's likely that you use a central server for that.

With

show run aaa

you can see which authentication-server-group is used. With

show run aaa-server

you see which server it uses.

[amdc42970]

show run aaa

aaa authentication enable console LOCAL
aaa authentication serial console LOCAL
aaa authentication ssh console LOCAL
aaa authentication http console LOCAL
aaa authentication telnet console LOCAL
aaa authorization command LOCAL

show run aaa-server

this command doesn't show any answer. It just comes back to the command prompt.

I'm logging in with username "abc" and some password "def". All I want to just change this password and then the enable password.

[Karsten Iwen]

Then you have to change the password of the user "abc".

[amdc42970]

I'm sorry, how do I do that?

[Karsten Iwen · Accepted solution]

asa (config)# username abc password YOURNEWPASSWORD

[amdc42970]

Thank you !!! That worked.

[amdc42970]

username abc password dfsdfdsfsdfsdfsdfsdf encrypted privilege 15

Above is the only username statement I see when I run the show run command.