Filter
Top Products
1-6
Cisco ASDM User Guide
OL-16647-01
Chapter 1 Welcome to ASDM
Unsupported Commands
To exit Monitor-only mode, use the CLI tool or access the security appliance console, and remove
the alias command. You can use outside NAT instead of the alias command. See the Cisco Security
Appliance Command Reference for more information.
Note You might also be in Monitor-only mode because your user account privilege level, indicated in
the status bar at the bottom of the main ASDM window, was set up as less than or equal to three
by your system administrator, which allows Monitor-only mode. For more information, choose
Configuration > Device Management > Users/AAA > User Accounts and
Configuration > Device Management > Users/AAA > AAA Access.
Discontinuous Subnet Masks Not Supported
ASDM does not support discontinuous subnet masks such as 255.255.0.255. For example, you cannot
use the following:
ip address inside 192.168.2.1 255.255.0.255
Interactive User Commands Not Supported by the ASDM CLI Tool
The ASDM CLI tool does not support interactive user commands. If you enter a CLI command that
requires interactive confirmation, ASDM prompts you to enter “[yes/no]” but does not recognize your
input. ASDM then times out waiting for your response.
For example:
1. From the ASDM Tools menu, click Command Line Interface.
2. Enter the crypto key generate rsa command.
ASDM generates the default 1024-bit RSA key.
3. Enter the crypto key generate rsa command again.
Instead of regenerating the RSA keys by overwriting the previous one, ASDM displays the following
error:
Do you really want to replace them? [yes/no]:WARNING: You already have RSA
ke0000000000000$A key
Input line must be less than 16 characters in length.
%Please answer 'yes' or 'no'.
Do you really want to replace them [yes/no]:
%ERROR: Timed out waiting for a response.
ERROR: Failed to create new RSA keys names <Default-RSA-key>
Workaround:
• You can configure most commands that require user interaction by means of the ASDM panes.
• For CLI commands that have a noconfirm option, use this option when entering the CLI command.
For example:
crypto key generate rsa noconfirm