Cisco ASA 5505 - Cant get into ASDM Web 2

[geek98]

When I pull up the web page of my Cisco ASA 5505 it promps with a username and password from IE. The username and password is to authenticate you to even get the page to come up. im not even getting into the ASDM page. I have done a configure factory-default and write mem several times and it still doesnt work. below is my current config.


ciscoasa(config)# sho run
: Saved
:
ASA Version 7.2(4)
!
hostname ciscoasa
domain-name
default.domain.invalid
enable password 8Ry2YjIyt7RRXU24 encrypted
passwd 2KFQnbNIdI.2KYOU encrypted
names
!
interface Vlan1
nameif inside
security-level 100
ip address 192.168.1.1 255.255.255.0
!
interface Vlan2
nameif outside
security-level 0
ip address dhcp setroute
!
interface Ethernet0/0
switchport access vlan 2
!
interface Ethernet0/1
!
interface Ethernet0/2
!
interface Ethernet0/3
!
interface Ethernet0/4
!
interface Ethernet0/5
!
interface Ethernet0/6
!
interface Ethernet0/7
!
ftp mode passive
dns server-group DefaultDNS
domain-name default.domain.invalid
pager lines 24
logging asdm informational
mtu inside 1500
mtu outside 1500
icmp unreachable rate-limit 1 burst-size 1
asdm image disk0:/asdm-615.bin
no asdm history enable
arp timeout 14400
global (outside) 1 interface
nat (inside) 1 0.0.0.0 0.0.0.0
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
http server enable
http 192.168.1.0 255.255.255.0 inside
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
telnet timeout 5
ssh timeout 5
console timeout 0
dhcpd auto_config outside
!
dhcpd address 192.168.1.2-192.168.1.254 inside
dhcpd enable inside
!

!
!
prompt hostname context
Cryptochecksum:8795ea8e4fbc763f50ab4a58b2342827
: end
ciscoasa(config)#

As you can see the box is basically at the factory defaults. Does anyone know how i can get past the prompt for a username and password to authenticate to even get to the web page. I have tried entering the enable passwork while leaving the username blank and i have tried leaving both blank and it still wont go in. I dont even get to the page where i can install the ASDM client or run it in JAVA. I have been to this page in the past on this particular ASA i just cant anymore. Can anyone shed some light on this. I am not real good with CLI commands so any help you can give me would be great.

Thanks

 

[geek98]

Here is what i get when trying to access the page from Firefox.

404 Not Fount
the requested URL. /admin/index.html was not found on this server.


When i purposely enter the wrong password it just keeps asking for a passwrod till i try to many times. When i enter the correct password i imediately get the 404 not Found error. I really need to get this thing working. I have been into it in the past and that is why i dont understand why it isnt working.

 

[Viconsul]

Have you tried

https://192.168.1.1

and make sure the port you are connected to on the Asa is in vlan 2.

 

[geek98]

I am using

https://192.168.1.1

to connect i have also tried

https://192.168.1.1/admin

and I get the same results at both. I am connected to Eth 0/1 which should be on Vlan1 which is the inside Vlan. However when you look at the config above it doesnt show any Vlan on ports 1 though 7 but when I do a "show switch vlan" I get the below so eth 0/1 is in Vlan1 it appears.

VLAN Name Status Ports
---- -------------------------------- --------- -----------------------------
1 inside up Et0/1, Et0/2, Et0/3, Et0/4, Et0/5, Et0/6, Et0/7
2 outside down Et0/0

Is there anything that I can do to connect to get this device configured? Like is there anyway that I can get the ASDM Loader and connect with that. If so does anyone know where I can get that from?

 

[burtsbees]

You don't have ssl set up (http secure-server)---you have only http (http server). You need to do

http://192.168.1.1

/

tim@tim-laptop ~ $ sudo apt-get install windows
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Couldn't find package windows...Thank Goodness!

 

[geek98]

When I use

http://192.168.1.1

I just get page cannot be displayed. From everything I have read I think I have to use https from the factory defaults. Do I have to do something to enable https?

 

[burtsbees]

http secure-server, but that is in routers. Perhaps post this in the ASA forum?

/

tim@tim-laptop ~ $ sudo apt-get install windows
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Couldn't find package windows...Thank Goodness!

 

[geek98]

I tried http secure-server and it doesnt work. Is there anything else I can try? When I open

https://192.168.1.1

it acts like the page is accessible and then when I type the password in it shows page cannot be displayed. Sorry but where can I find the ASA forum?

 

[ISPKing]

I think Your ASDM version is too high for you Image. try the 5.x ver of asdm with pre 8.0 code.

CCNP

 

[burtsbees]

http://www.tek-tips.com/threadminder.cfm?pid=1598

/

tim@tim-laptop ~ $ sudo apt-get install windows
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Couldn't find package windows...Thank Goodness!

 

[geek98]

ISPKing where and how do I find the new images. This unit has worked in the past and I have not modified the images that are loaded on the unit.

 

[geek98]

Ok ISPKing I thinkg your heading me down the right direction. So below is a portion of a Show Flash. I see that my asdm is asdm-615.bin and in a sho run I am running ASA 7.2 4 which I'm guessing is asa724-k8.bin but I also see a asa804-k8.bin. Im guessing I need to switch and run the asa804-k8.bin flash like ISPKing was stating.

Ciscoasa1(config)# sho flash
-#- --length-- -----date/time------ path
6 8515584 Dec 12 2008 10:47:16 asa724-k8.bin
7 4181246 Dec 12 2008 10:48:18 securedesktop-asa-3.2.1.103-k9.pkg
8 398305 Dec 12 2008 10:48:44 sslclient-win-1.1.0.154.pkg
11 0 Dec 12 2008 10:54:52 crypto_archive
12 7598456 May 06 2009 10:01:06 asdm-615.bin
13 14137344 May 06 2009 10:21:22 asa804-k8.bin
14 0 May 06 2009 10:26:32 log


Now the questions, how do I get the 5505 to start using the asa804-k8.bin flash version? Do I just do a "delete flash:/asa723-k8.bin" and reload? If so will it just load the newer version or do I have to do something to get it to load the new version. Yes I know I'm asking questions like I dont know to much about Cisco equipment and its true but I'm learning.

 

[Viconsul]

From the global config mode you should be able to do

boot system flash:/asa804-k8.bin

But take a backup of your config and make a note of any activation key because you may need it.

 

[Viconsul]

The asa use disk0: instead of the name flash: so substitute flash: for disk0: in the above and it should be fine. This is documented here.

http://www.cisco.com/en/US/products...ation_example09186a008067e9f9.shtml#maintask2

 

[ISPKing]

It will automatically convert flash to disk after entering the command.

CCNP

 

[geek98]

ISPKing you rock you figured it out and viconsul thanks for the info on making the change. You guys got me working again. I cant thank you guys enough.

 

[ISPKing]

Np/
Enjoy/

CCNP