[Cisco Asa 5505 Activation Key 67
Iberio Ralda
Cisco has FINALLY heard us! The purveyors and Champions of the Small to medium business markets, and produced the first match to the Cisco ASA5505. First they gave us the 5506 and we were all upset about the fact that the ports were NOT switched. Well with this we can run ASA and FTD code, join it to FMC, and comming in 6.5 code we can get 650Mbps of IPS traffic throughput on this baby! This fills a HUGE hole in the market. I'm so happy to this this. What are your thoughts???
Rob, Thank you for your timely response. After looking at the link above, I don't think I had been descriptive enough as to what I am looking for. I have a Cisco ASA 5505 running Cisco Adaptive Security Appliance Software Version 8.4(2). I am looking to copy the startup-config file into the FPR1000 appliance. My concern is that they are not compatible or there may be deprecated commands not supported in the FPR1000. Can I just copy the ASA 5505 startup-config file into the FPR1000 and have the appliance run without issues?
@GlennJoseph the minimum ASA software version you can run on the FPR1000 is 9.14, there quite a big difference between 8.4 and 9.14. There will be depreciated SSL, IKE, IPSec ciphers to start with and from 9.17 Clientless VPN is depreciated.
@GlennJoseph no you cannot. You can copy most of it but there are a number of commands that don't map between the different platforms' hardware capabilities. If you look through it, many are obvious and some not so much.
You can however try it and then boot while connected to console and capturing the output. Anything you missed during a human review/edit will show up as a parsing error when the system load the configuration file.
I just got a refurb'd ASA 5505 and configured it with IOS/ASDM. Everything seems fine but it won't let me open the ASDM in a webpage. When trying to connect, I get an error telling me a "Secure Connection Failed". My other firewalls are OK. Can anyone tell me how to get the ASDM working on this or should I send it back to Cisco?
from the dropdown menu to the right of the Get New Licenses field select IPS, Crypto, Other... > Security Products > Cisco ASA 3DES/AES License and click next. Enter the serial number of your ASA and click next.
I have attached my new ASA 5505 to my computer with the network cable as described in section 5. I have verified that Firefox 3 has both Java and Javascript enabled. When I enter it times out with no connection.
I'm not sure what the default address is, but your ASA should have come with a rollover cable. (It's a light blue, flat cable with an RJ45 connection on one end and a serial (DB9) connection on the other.)
Once you have your IP address, you should be able to get into it. Also, make sure that your LAN is addressed on the same subnet as the ASA or you'll have to put a workstation in the 192.168.1.0/24 subnet.
I suspect you provided some part of the answer, because my lan is not on the 1 subnet. That should not have stopped the direct connection, but it should stop the LAN attempt. Maybe with the rollover cable and hyperterminal I can change my Cisco subnet to match the LAN.
I was sure it was Vlan1, and it kept saying it conflicted with Vlan2. So I changed it to Vlan2 and it took it. I made it 192.168.10.11 to put it on our subnet, and to avoid conflick with our yet to be removed Checkpoint firewall ending in 1.
From the sound of it, it doesn't sound like the ASA is configured for any public access yet, so you should just be able to post the config here without modifying it. Just double check there are no public addresses in the config for your security.
Is your workstation that you're trying to connect to the ASA with on the 192.168.1.0 network, or is it on the 192.168.10.0 network? If it's on the latter, you should connect your workstation to the back of the ASA and put your workstation statically on the 192.168.1.0 network. This will get you into it.
See if that works. You won't be able to ping 192.168.1.1 from the 192.168.10.0 side. ASA doesn't support pinging the opposite side of the device (from outside interface to inside). You can either ping the outside or inside, or through the device to another host on the inside from the outside.
We have in our (small) office a CISCO ASA 5505 but it died and I have ordered a new ASA device. As we had a template for the 5505 Series I tried to order a 5505 and use the template. But I heard from our supplier that the 5505 is oudated and only a 5506-x can be ordered.
unfurtunately, because now my template isn't working. I dont have loads of cisco knowledge, and I have searched on the web for solutions. The port configuration has been changed and I found a usefull document to change it, but all the rest of my commands are not working to...
2. The new ASA only runs ASA software 9.1 or higher. If you had a configuration built with old software (8.2(x) or lower - such as your template appears to be built from) then you will have to convert several configuration bits - most notably NAT and access-lists.
I have a problem configuring ASA 5505 to connect to internet because the modem that connect to internet was tagged with vlan to the ISP. As i know that the ASA 5505 is in switch mode, so in order to connect to the modem, its need to be in the router mode. My question is, can ASA 5505 be configure as a router mode and did it require any license to do that? Thanks in advance.
Firstly, there is no switch mode. The two modes are transparent and router mode. Router mode means that you can use all the features such as VPN and transparent is a layer2 firewall which allows you to place in a network without changing the topology and inspect l2 packets etc, but some of the more traditional features (like VPN) are not available.
The router mode still looks like a switch in the normal sense as it uses SVI as the interfaces. Depending on license depends on how many you can configure. Standard is three - inside,outside and management.
Back your configs up also as they will change significantly. I cant remember if the prompt allows to you configure a management interface this way around or not (been some time), but I would recommend doing this via console so you can at least start from scratch.
I dont have the device with me right now to run that command but I managed to capture image of my firewall when i configure using ASDM. My firewall already in the router mode right? Another question, can I configure ASA 5505 port to be in trunk mode?
I have inherited a handful of Cisco ASA 5505s, I'm not sure what exact model they are but they are all 8 port models. I tried inputting serial numbers into the cisco coverage checker to see if it would give me model numbers and none of them are recognized by that particular utility, so unfortunately this is all the information I have to go on. I have a few questions below that I was wondering if anyone had an answer to.
1. I was curious, as they only have a 100MBPS indicator light whether these are actually only able to process at fast ethernet speeds, despite a reasonably recent production timeframe or whether that means that a link has been throttled down due to connection to older devices.
2. regardless of whether these are gig, or fast ports, does the ASA possess the ability to actually filter traffic at that rate, or is it similar to the cheaper cisco ISR series routers like the 2911 that have gig ethernet ports but are only able to process 345Mbps?
I am asking because I have just recently been given a dedicated gig connection for my department, but I'm currently only utilizing half that because I am running straight from an EOL 6509 core switch and this is highly insecure because we are only securing with ACLs at the moment. I would like to set up a pair of 2911 routers with GLBP (to increase to around 700 Mbps), but all of the ones I have available are only running IPbasek9, so even though bandwidth would increase, security is still a concern in that setup. I have zero budget for purchasing extra licenses or devices so I'm trying to get the best setup with what I have on hand.
An ASA 5505 has a best case maximum throughput of about 150 Mbps. That's of course a best case lab scenario assuming several distinct flows are going through it to differing interfaces. A given interface can only run at 100 Mbps (hardware limitation). A given single flow will likely be even less.
My network runs through an ASA 5505. I recently started as the sole administrator at a small business and believe it or not, the previous administrator had documented absolutely nothing. Therefore I have no idea on how to access my device short of bringing it down and reconfiguring it. This being said, I have a few questions that hopefully someone can answer.
1. How can I identify what IP address the ASA resides on? Is it the same as my default gateway? I've read that you can access it via a web shell if you browse to although this might only be the case after you have installed the ASDM software on the local machine. I understand that the default is 192.168.1.1, but I'm sure this is not the case in my network because my wireless router uses that IP.
2) The default from Cisco would be username: pix and password: cisco, or you can also try username --> blank (nothing type in), with password: cisco. However I doubt that it will be left as default (but you might be lucky).
Unfortunately I have no documentation whatsoever except for one text file explaining how to log into the VPN. Actually, that's how all of this started - I need to manage the VPN users. Other than that, I think it's good for the network admin to know how to access the firewall!
I am still waiting to get my license info from CDW where we bought the unit so I can relate it to my online account. It is unfortunate that I have to go through all of this just to download the administrator software. Hopefully once I get hold of that I can try a few IP addresses and maybe get lucky.
795a8134c1