Archive | April, 2013

Cisco ASA 5505 from Factory Default to Static Address and defined inside subnet

I have been playing with an ASA 5505 lately. I wanted the ability to start fresh when I could not figure things out. I came up with the following commands to cut and paste into the console, allowing me to “Start over”.

First I reset to factory default and set the internal subnet range

configure factory-default 192.168.123.1 255.255.255.0

You have to hit the space bar a couple of times, then paste in the next sections:

boot system disk0:/asa911-k8.bin
interface Vlan2
 ip address 123.123.123.123 255.255.255.0
route outside 0.0.0.0 0.0.0.0 38.117.203.126
dhcpd dns 8.8.8.8
dhcpd address 192.168.123.5-192.168.123.132 inside
dhcpd enable inside

ssh scopy enable
ssh 192.168.123.0 255.255.255.0 inside
ssh timeout 60
ssh version 2
console timeout 0
username myusername password 3ncrypt3dp4$$w0rd encrypted privilege 15
no call-home reporting anonymous

!-- Optional - allow pings outbound
policy-map global_policy
  class inspection_default
   inspect icmp
   exit
   exit
!

This code above sets the external IP, enabled DHCP internally, enables ssh and scope, creates a user, and allows pings through.

I hope this might help someone.

Powered by WordPress. Designed by WooThemes