cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1260
Views
0
Helpful
19
Replies

Change ASA Firewall Address

mikros
Level 1
Level 1

When I go through the ASDM manager and change the IP address of the ASA5505 unit and write to memory I get an error. Is there a way to do this via the console port? Thanks

1 Accepted Solution

Accepted Solutions

go to enable mode and issue

no dhcpd address 192.168.1.2-192.168.1.33 inside

then configure the vlan to re-ip the interface after that is done go back to placing back dhcp pool for your inside network using your new IP subnet information, follow the pool format you removed for the IP range.

Jorge Rodriguez

View solution in original post

19 Replies 19

whisperwind
Level 1
Level 1

1. Connect to the ASA

2. Enter Configuration mode

3. Enter the interface type and number

4. Enter the new ip address

5. Save configuration

This will look as follows, were x is ip address and y is mask:

asa(conf)# int e0

asa(conf-if)# ip address x.x.x.x y.y.y.y

JORGE RODRIGUEZ
Level 10
Level 10

Yes you can, follow the process on this link

http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/intparam.html#wp1051819

Jorge

Jorge Rodriguez

Here is what I typed

enable

p/w

config t

int e0 and I get and error "% Incomplete Command"

TIA

please post " show interface " or follow the link I posted for complete CLI syntax.

Jorge Rodriguez

My example said e0, your ASA likely has a different interface type / number, once you determine what that is and enter it in place of my example you should be fine.

A sh run or sh interface will provide that information for you

I agree with Whisper, his example script with int e0 should have worked !

Jorge Rodriguez

when I type sh run I get

Ethernet0/0 - Ethernet0/8

are you sure you have an ASA,

do " show version " and post info.

Jorge Rodriguez

ASA 8.0(2)

Device Mgr 6.0(2)

ASA5505

Go to this link, you actually have to configure the ip in VLAN1 and/or VLAN2 instead of the physcal inetertace as this comes as default configuration for the 5505s

so you would do

config t

interface vlan#

http://www.cisco.com/en/US/docs/security/asa/asa80/getting_started/asa5505/quick/guide/setup.html#wpxref79743

Defaults

Two VLANs: VLAN 1 and VLAN2

?VLAN 1 has the following properties:

?Named "inside"

?Allocated switch ports Ethernet 0/1 through Ethernet 0/7

?Security level of 100

?Allocated switch ports Ethernet 0/1 through 0/7

?IP address of 192.168.1.1 255.255.255.0

?VLAN2 has the following properties:

?Named "outside"

?Allocated switch port Ethernet 0/0

?Security level of 0

?Configured to obtain its IP address using DHCP

Jorge Rodriguez

So after I type interface vlan1

I type ip address x.x.x.x y.y.y.y and I get an error "interface address is not on the same subnet as DHCP pool" should I disable DHCP and if so how?

Well there you go, your ASA has interfaces labelled as ethernet 0/0 and so forth :-)

I can get to Ethernet0/0 then when I type

ip address x.x.x.x y.y.y.y I get an Error "This can only be configured on VLAN devices"

see my previous post.

configure the ip addresses through VLAN#

your inside vlan is VLAN1 and VLAN2 is your outside.

config t

interface vlan1

ip address x.x.x.x MASK

Jorge Rodriguez
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card