Cisco ASA “minimal” config

Oct06
by Frank on October 6, 2015 at 10:03
Posted In: Misc, Professional / IT

I’m currently trying to make friends with Cisco ASAs, and I keep forgetting things. Here’s a “minimal” config – create a key for future ssh access, a user/pass for any type of access, and enable http (and from where you accept https connections) for ASDM access

crypto key generate rsa modulus 1024
username password privilege 15
http server enable
http (for instance: http 10.1.2.3 255.255.255.255 outside)

Once you’re in with ADSM, don’t forget
Config -> Device Management -> Users/AAA -> AAA Access
– Authentication Tab: check ‘Enable’ in the ‘Require auth to allow use’ at the top
– Authentication Tab: check ‘SSH’
– Authorization Tab: check ‘Enable Server Group…’

Configuration > Device Management > Management Access > ASDM/HTTPS/Telnet/SSH
– add “asdm/https” and “ssh” IP/netmask as needed

And don’t forget to hit “Apply” and then also “Save”