Change multiple addresses on an ASA 5510

[brk1221]

Hi, we are changing our internet circuit and will have a new block of addresses. In our ASA 5510, what is the easiest way to change all these access list-addresses to the new ones? I make changes from time to time but I'm far from proficient in cisco cli. Any help would be appreciated

 

[iggsterman]

1. Copy the access-list lines to an editor twice. In the 1st copy replace the IP addresses as you need AND RENAME the access list. Prepend all the ACL lines in the second copy of with "no".
2. Go to the ASA. Enter the configuration mode (config t). Paste in the new ACL with the new IPs.
3. Locate the line that reads "access-group <old ACL name> ..." and enter the same line with THE NEW ACL name.
4. Paste in all lines with the "no" from the step 1. This will remove the debris.
5. OPTIONAL: enter this command:
access-list <new-name> rename <old> name

test and save.

 

[brk1221]

Thanks for the reply. Does the same apply for static routes? Such as:

static (inside,outside) tcp public address port private address port netmask 255.255.255.255


Thanks

 

[iggsterman]

In short, not quite and these are not routes.
1. issue "no static (inside,outside) ...." for each line
2. enter the new ones.
3.
clear xlate
clear local-host

 

[brk1221]

Thanks - is it possible to copy the entire config to notepad, make address changes and then copy it back overwriting original?

 

[iggsterman]

1. get the config to your PC/server. It will save it as "config-2-edit"

copy running-config tftp://<IP-of-tftp-server>/config-2-edit

2. save locally (on the flash) just in case, do not skip this.

copy startup-config startup-saved

3. edit it on your PC and place it back to the same directory where you found it.
4. overwrite the startup-conig with the one you edited

copy tftp://<IP-of-tftp-server>/config-2-edit> startup-config

5. reboot the ASA

reload

If things go wrong (you mess up the config):

copy startup-saved startup-config
reload