Cisco Systems OL-16647-01 Network Router User Manual


  Open as PDF
of 1230
 
4-2
Cisco ASDM User Guide
OL-16647-01
Chapter 4 Before You Start
Factory Default Configurations
Step 1 Choose File > Reset Device to the Factory Default Configuration.
Step 2 To change the default IP address, do one of the following:
For the ASA 5500 series, check the Use this address for the Management 0/0 interface that will
be named as “management” check box, enter the new IP address in the Management IP Address
field, and then choose the new subnet mask in the Management Subnet Mask drop-down list.
For the PIX series, check the Use this address for the Ethernet 1 interface, which will be named
“inside” check box, enter the new inside IP address in the Inside IP Address field, and then choose
the new inside subnet mask in the Inside Subnet Mask drop-down list.
Step 3 Click OK.
Note After restoring the factory default configuration, the next time you reload the adaptive security
appliance, it boots from the first image in internal Flash memory. If an image does not exist in internal
Flash memory, the adaptive security appliance does not boot.
ASA 5505 Default Configuration
The default factory configuration for the ASA 5505 adaptive security appliance provides the following:
An inside VLAN 1 interface that includes the Ethernet 0/1 through 0/7 switch ports. If you did not
set the IP address in the configure factory-default command, then the VLAN 1 IP address and mask
are 192.168.1.1 and 255.255.255.0.
An outside VLAN 2 interface that includes the Ethernet 0/0 switch port. VLAN 2 derives its IP
address using DHCP.
The default route is also derived from DHCP.
All inside IP addresses are translated when accessing the outside interface using PAT.
By default, inside users can access the outside with an access list, and outside users are prevented
from accessing the inside.
The DHCP server is enabled on the adaptive security appliance, so that a computer connecting to
the VLAN 1 interface receives an IP address between 192.168.1.2 and 192.168.1.254.
The HTTP server is enabled for ASDM and is accessible to users on the 192.168.1.0 network.
The configuration consists of the following commands:
interface Ethernet 0/0
switchport access vlan 2
no shutdown
interface Ethernet 0/1
switchport access vlan 1
no shutdown
interface Ethernet 0/2
switchport access vlan 1
no shutdown
interface Ethernet 0/3
switchport access vlan 1
no shutdown
interface Ethernet 0/4
switchport access vlan 1
no shutdown