Saturday 27 February 2016

ASDM on Cisco ASA Step by Step

Hello,
This post explains how to enable ASDM on Cisco ASA.

  • The first thing you need is to have an interface with an IP address and nameif configured. In my case I have the interface gig0 with the ip address of 10.10.10.1/24 with nameif inside,
  • You need to copy the ASDM file into your ASA Flash using the command copy tftp: flash as shown below:




    3. Wait for some seconds until the upload finishes.
    4. Now, to make sure that the ASDM file is uploaded use the command dir
     ciscoasa(config)# dir

Directory of disk0:/

3      drwx  4096         18:26:48 Feb 26 2016  log
8      drwx  4096         18:26:52 Feb 26 2016  coredumpinfo
13     -rwx  196          18:26:52 Feb 26 2016  upgrade_startup_errors_201602261826.log
11     -rwx  196          18:47:40 Feb 27 2016  upgrade_startup_errors_201602271847.log
17     -rwx  17232256     19:48:08 Feb 27 2016  asdm-645-206.bin

268136448 bytes total (250843136 bytes free)
ciscoasa(config)#


         As you can see in the last line, the asdm file is there. 
  •      Now enable http function on ASA using the command 
ASA(config)# http server enable
  •     You will need to tell the ASA which IP address can access the ASA ASDM. In my case the IP address of my PC is 10.10.10.2/32 including the nameif 
ASA(config)# http 10.10.10.2 255.255.255.255 inside
  •   Now to make sure that the https works, go to your web browser and type https://10.10.10.1 You will get a warning, because this is a self signed certificate. Click on proceed. You will get the following screen 


  •   Choose the first option to download the ASDM Launcher and then install it. 
  •    Run the ASDM Launcher and write the IP address of the ASA and hit enter (notice that the   user name and the password are left blank as we didn't yet configured on the users on the ASA). You will get the warning screen shown below.





  •  Just Click on Yes. Wait for a few seconds until the ASDM for ASA management console is loaded as shown below. 

  • Finally, save your configurations on ASA using the command write mem

That is all for today! Thanks for your time. See you later.




Friday 26 February 2016

Allow For Ping in Cisco ASA

One of my friend asked me that he is not able to ping from his Cisco ASA device. If you also have the same issue, then here is how to enable ping in your ASA device. 

The first thing you need to do is to define your outside interface and give it an ip address. for the sake of this lesson I use GNS3. I use the interface gig0 as an outside interface as shown below:
ciscoasa# show inter ip brief
Interface                  IP-Address      OK? Method Status                Protocol
GigabitEthernet0           10.10.10.1      YES manual up                    up
GigabitEthernet1           unassigned      YES unset  administratively down up
GigabitEthernet2           unassigned      YES unset  administratively down up
GigabitEthernet3           unassigned      YES unset  administratively down up
GigabitEthernet4           unassigned      YES unset  administratively down up
GigabitEthernet5           unassigned      YES unset  administratively down up
The command you will need to use is 
     ciscoasa(config)# icmp permit any outside
Where  icmp is the protocol and outside is the name of the interface the we need to enable it to ping 
That's all for today! Thanks and have a nice one

Thursday 11 February 2016

Latex Error "! Text line contains an invalid character. l.2 "

Latex is very powerful text Editor which all High Education Degree Student use to write their these. If you have encountered the error of ! Text line contains an invalid character. l.2, then that's why you are reading this topic. I have encountered this error and after googling it, I have finally get the clue. To solve this problem, simple delete the .aux file and run the tex file and everything will be fine.