Networxpedia

Ø  The initial configuration brings up the following basic functions:

·         One interface is set as a protected “management” network, where a PC will connect.

·         A DHCP server is enabled on management network, at connected have to automatically provide an IP address to PC.

·         An HTTP server also running on management network, to allow the PC to access ASDM with the ASA via TCP port 443.

·         Management interface have IP address 192.168.1.1 and CIDR 24.

·         DHCP server allowed to provide address from a range of 192.168.1.2 to 192.168.1.254

·         HTTP server configured with subnet 192.168.1.0/24 for allow ASDM.

·         ASA’s interface 0/0  works as Management interface at initial configuration.

·         For return to factory default configuration by entering the command:

Ciscoasa(config)# configure factory-default

Ø  The configuration commands in the startup configuration are not lost after a reload or power failure.

Ø  When ASA boots, the Startup Configuration commands are copied to “running” configuration file in RAM.

Ø  ASA have Volatile RAM memory.

Ø  # show startup-config command used to see contents of the startup configuration.

Ø  We can see the running configuration content by entering the # show running-config

Ø  ASA platforms can maintain one or more startup configuration files in flash, depends on space.

Ø  Only one of these can be used at boot time.

Ø  The startup conf contents can be saved in one file during the time that the firewall configuration is stable. If major conf changes need to be made, the new, updated running configuration can be saved to a new , different startup configuration file.

Ø  The next time the ASA is booted, it can use the new startup configuration file.

Ø  If we encounter problems with the new conf, we can force the firewall to roll back or use previous startup configuration in flash memory.

Ø  We can see the startup-conf  file by command: #show startup-configuration

Ø  To force the ASA to use different startup conf file, use the command:

Ciscoasa(config)# boot config <url>

Here url represents the location of the startup configuration file. It can be

·         flash: path

·         disk0: path

2.       Clear configure primary : Clear all commands related to connectivity, including ip address, mtu , monitor-interface , boot, route, failover, tftp-server , and shun .

3.       Clear configure secondary : Clears all commands not related to ASA connectivity.

Ø  When an ASA boots, it uncompresses and copies an executable OS image from flash to RAM.

Ø  This image actually run from RAM.

Ø  While an image is being run, a different image can be copied or written into flash memory.

Ø  Contain a tree of directories, each containing arbitrary files.

Ø  ASA offers a disk0: and a flash: device. These both refer to the same internal flash memory file system.

Ø  When we connect to an ASA , our session begins in the disk0:/root directory. This directory can contain other files or sub-directories.

Ø  ASA also support a disk1: device, which is a removable flash drive.

Ø  To view the contents of a file , use command:

More [ / ascii | / binary | / ebcdic ] [ device : ] path

      Ø  By default, the file contents are shown as plain text.

      Ø  We can add the /ascii or /binary option to display both hex and ASCII represents of the file contents.

       Ø  The asa802-k8.bin image was the only valid image found at bootup time.

       Ø   The boot system disk0:/asa823-k8.bin command is then entered so that the ASA will run an upgrade  image after its next reload.

       Ø  Immediately afterward, the current BOOT variable line indicates that the new image has been identified, but will not yet be used.

       Ø  Finally, the running configuration is saved to the startup configuration.

     Ciscoasa# reload at hh:mm [ day month | month day ]

       Ø  To schedule a reload after a time interval:

     Ciscoasa# reload in { mm | hhh:mm }