ASA-5505 Password Recovery

The ASA5505 handles 100 Mbps VPN traffic with 25 concurrent users. These users can be a 

combination of SSL or IPSec. 

VPN장비로 Cisco 장비 많이들 쓰실거라 생각됩니다.

Cisco ASA5505 장비 설치를 위해 중국 소주(suzhou)로 출장을 다녀왔습니다. (12.12~16)

또, 얼마전엔 지사에 VPN장비가 쇼트나서 급히 같은 모델을 구해서 일단 CF카드만 교체해서 

Config 설정을 확인하려 했는데 이전에 설정했던 Password가 기억이 안나서...

패스워드 복구방법을 포스팅합니다.^^

Performing Password Recovery for the ASA 5500 Series Adaptive Security Appliance

To recover passwords, perform the following steps:

---

Step 1 Connect to the security appliance console port according to the "Accessing the Command-Line Interface" section on page 2-4.

Step 2 Power off the security appliance, and then power it on.

Step 3 During the startup messages, press the Escape key when prompted to enter ROMMON.

Step 4 To set the security appliance to ignore the startup configuration at reload, enter the following command:

 

rommon #1> confreg

The security appliance displays the current configuration register value, and asks if you want to change the value:

 

Current Configuration Register: 0x00000011

Configuration Summary:

  boot TFTP image, boot default image from Flash on netboot failure

Do you wish to change this configuration? y/n [n]:
 

Step 5 Record your current configuration register value, so you can restore it later.

Step 6 At the prompt, enter Y to change the value.

The security appliance prompts you for new values.

Step 7 Accept the default values for all settings, except for the "disable system configuration?" value; at that prompt, enter Y.

Step 8 Reload the security appliance by entering the following command:

 

rommon #2> boot

The security appliance loads a default configuration instead of the startup configuration.

Step 9 Enter privileged EXEC mode by entering the following command:

 

hostname> enable

Step 10 When prompted for the password, press Return.

The password is blank.

Step 11 Load the startup configuration by entering the following command:

 

hostname# copy startup-config running-config

Step 12 Enter global configuration mode by entering the following command:

 

hostname# configure terminal

Step 13 Change the passwords in the configuration by entering the following commands, as necessary:

 

hostname(config)# password password

hostname(config)# enable password password

hostname(config)# username name password password

Step 14 Change the configuration register to load the startup configuration at the next reload by entering the following command:

 

hostname(config)# config-register value

Where value is the configuration register value you noted in Step 5 and 0x1 is the default configuration register. For more information about the configuration register, see the Cisco Security Appliance Command Reference.

Step 15 Save the new passwords to the startup configuration by entering the following command:

 

hostname(config)# copy running-config startup-config

*참고 URL 

http://www.gomjabbar.com/2011/05/16/removing-the-flash-memory-from-a-cisco-asa-5505/

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a008072142a.shtml