Cisco ASA 5510 Firewall Logo
a
alnaqeep Posted on Dec 01, 2014
Answered by a Fixya Expert

Trustworthy Expert Solutions

At Fixya.com, our trusted experts are meticulously vetted and possess extensive experience in their respective fields. Backed by a community of knowledgeable professionals, our platform ensures that the solutions provided are thoroughly researched and validated.

View Our Top Experts

ASA5510 Suddenly does not Work, Active LED off, I can't ping to ASA5510, also can't access the CLI through the console or the ASDM through the Startup Wizard using the browser. Is this normal? how do

ASA5510 Suddenly does not Work, Active LED off, I can't ping to ASA5510, also can't access the CLI through the console or the ASDM through the Startup Wizard using the browser. Is this normal? how do I get around this problem.

2 Answers

Jonathan Shreve

Level 2:

An expert who has achieved level 2 by getting 100 points

All-Star:

An expert that got 10 achievements.

MVP:

An expert that got 5 achievements.

Mentor:

An expert who has written 3 tips or uploaded 2 video tips.

  • Expert 143 Answers
  • Posted on Dec 29, 2014
Jonathan Shreve
Expert
Level 2:

An expert who has achieved level 2 by getting 100 points

All-Star:

An expert that got 10 achievements.

MVP:

An expert that got 5 achievements.

Mentor:

An expert who has written 3 tips or uploaded 2 video tips.

Joined: Oct 28, 2010
Answers
143
Questions
0
Helped
43436
Points
470

It sounds as though you may have a failed power supply. If that is the case you will not be getting any response from the device. If you are getting activity (fans spinning, LED activity) then there is a different issue.

Plug a console cable into the device and open up a terminal window (I prefer putty). Make sure your serial settings are 9600 baud, 8 data bits, 1 stop bit, no parity and no flow control. Once you have your putty window open, reboot the device. You definitely should have some activity on your terminal screen during the boot process. If the characters are unreadable, your ASA is set to use non-standard serial settings. In this case, you will have to guess at what they are. When I have seen this in the past, it was due to someone trying to xmodem an image to the device and upped the baud to its maximum of 115200. You can try that.

However, once you get the device to respond via its console cable, you will have more information to determine the root cause of this issue. For example, are you getting errors on POST (power on self test)? Is the device loading into ROMMON (ROM Monitor)? Are the ASICs passing POST? Once you have this information, you can ask about your specific issue here on fixya, or you can search Cisco documentation to find further information.

Furthermore, I always recommend purchasing/renewing your Cisco SmartNet contracts. This will give you access to Cisco TAC and allow you to get parts replacement in case of hardware failure.

I hope this helps.

Mark Taylor

Level 3:

An expert who has achieved level 3 by getting 1000 points

All-Star:

An expert that got 10 achievements.

MVP:

An expert that got 5 achievements.

Vice President:

An expert whose answer got voted for 100 times.

  • Master 728 Answers
  • Posted on Dec 14, 2014
Mark Taylor
Master
Level 3:

An expert who has achieved level 3 by getting 1000 points

All-Star:

An expert that got 10 achievements.

MVP:

An expert that got 5 achievements.

Vice President:

An expert whose answer got voted for 100 times.

Joined: Dec 02, 2008
Answers
728
Questions
0
Helped
335411
Points
2225

Try to reset the device again and connect to a different power source.

Ad

1 Related Answer

Anonymous

  • 97 Answers
  • Posted on Oct 17, 2010

SOURCE: i have a problem in asa5510

It sounds like you have not allowed ICMP (ping) through the firewall, and you may need to put an access list in to allow this.

Ad

Add Your Answer

×

Uploading: 0%

my-video-file.mp4

Complete. Click "Add" to insert your video. Add

×

Loading...
Loading...

Related Questions:

2helpful
1answer

What is the default ip address for powerconnect 5212

You must assign an IP address to the switch to gain management access over the network. You may also need to a establish a default gateway between the switch and management stations that exist on another network segment. You can statically configure a specific IP address or direct the switch to obtain an address from a Boot Protocol (BOOTP) or Dynamic Host Configuration Protocol (DHCP) server when it is powered on. Valid IP addresses consist of four decimal numbers, 0 to 255, separated by periods. Anything outside this format is not accepted by the CLI program. notice.gif NOTICE: By default, the IP address is assigned to VLAN 1 through DHCP. If you select the bootp or dhcp option, IP is enabled but does not function until a BOOTP or DHCP reply has been received. Requests are broadcast periodically by the switch in an effort to learn its IP address. (BOOTP and DHCP values can include the IP address, default gateway, and subnet mask).
To display assigned IP settings using the CLI:
  1. From the Privileged Exec or Normal Exec level mode, type show ip interface and press <Enter>.

The assigned IP address and subnet mask displays.

  1. From the Privileged Exec mode, type show ip redirects to display the assigned gateway IP address. Press <Enter>.

The following example displays IP settings assigned by bootp or dhcp using the CLI.

Console#show ip interface

IP address and netmask: 10.1.0.1 255.255.252.0 on VLAN 1,

and address mode: User specified.

Console# show ip redirects

ip default gateway 10.1.0.254

Console#
Before you can assign a static IP address to the switch, you must obtain the following information from your network administrator:

  • IP address for the switch

  • Default gateway for the network

  • Network mask for the network

To assign a static IP address to the switch:
  1. From the Privileged Exec level global configuration mode prompt, type interface vlan 1 to access the interface-configuration mode. Press <Enter>.

  2. Type ip address ip-address netmask, where ip-address is the switch IP address and netmask is the network mask for the network.

  3. Type exit to return to the global configuration mode prompt. Press <Enter>.

  4. To set the IP address of the default gateway for the network to which the switch belongs, type ip default-gateway gateway, where gateway is the IP address of the default gateway. Press <Enter>.

  5. To save your configuration changes, type copy running-config startup-config and then press <Enter>.

notice.gif NOTICE: Only one VLAN can be assigned an IP address. If you assign an address to any other VLAN, the new address overrides the original IP address. The following example shows how to set a static IP address using the CLI.

Console(config)# interface vlan 1

Console(config-if)# ip address 192.168.1.5 255.255.255.0

Console(config-if)# exit

Console(config)# ip default-gateway 192.168.1.254

Console(config)#
To configure the switch for DHCP or BOOTP:

  1. From the Privileged Exec level global configuration mode prompt, type interface vlan 1 to access the interface-configuration mode. Press <Enter>.

  2. At the next prompt, use one of the following commands:

    • To obtain IP settings through DHCP, type ip address dhcp

    • To obtain IP setting through BOOTP, type ip address bootp

  3. Press <Enter>.

  4. To save your configuration changes, type copy running-config startup-config, and then press <Enter>.
0helpful
1answer

I have a problem in asa5510 eth0 ip is 192.168.100.51 (inside) eth3 is static ip i can ping 4.2.2.4 from asa but i cant ping 4.2.2.4 from inside please solve this problems

It sounds like you have not allowed ICMP (ping) through the firewall, and you may need to put an access list in to allow this.
0helpful
1answer
0helpful
3answers

New cisco asa 5510 setup

connect your laptop to the asa5510 using a cross over cable
0helpful
1answer

Ploblems with dmz-outside (webpage). pix

Remove this line:

static (DMZ,INSIDE) 10.10.0.0 10.10.0.0 netmask 255.255.255.0

You don't need a translation going from a lower security level to a higher one. You will also need a nat line for the dmz so that pc's on the dmz will be translated outbound. The only connection that will work on the dmz is the webserver when he's sending traffic outbound with a source port of 80. Something like:

nat (DMZ) 101 10.10.0.0 255.255.255.0

Other than that, it looks like it should be working. You've got permission, a route, and a translation. Maybe "clear local-host 10.10.0.2" to get rid of any bad xlates and try again. Check debg level syslogs, run packet captures, "clear asp drop" then "show asp drop" after an attempt?

0helpful
1answer

Cisco 1750 not showing anything in cli in hyperterm

First, make sure your terminal settings are correct.  Also, make sure you are using the right cable.  Cisco provides a flat, blue console cable with every router and switch.
Cisco lists the necessary terminal settings for most of their models here: http://www.cisco.com/en/US/products/hw/switches/ps700/products_tech_note09186a008010ff7a.shtml
Power off the router and then power it back on.
If you are still not seeing any characters through your terminal application, then the router is most likely dead and will need to be replaced.
1helpful
1answer

Cisco asa5505 problem

You seem to have the last resort (o.o.o.o) set to VLAN1 which is set as an inside interface.
Is VLAN1 connected to the outside router or internet backbone?
If not, change the last resort to the outside Ethernet port.
9helpful
4answers

Installation of cisco asa 5510 firewall

If you can't get the manament working initially I suggest the following

Setup a console connection
Type "enable" and press enter to access priveleged exec mode on the ASA
Type "config terminal" and press enter to access configuration mode
Type "configure factory-default" and press enter to load default settings.
Assign a static IP to your PC of 192.168.1.5 and try to browse to https://192.168.1.1 (PC is plugged into management interface)

You should be prompted to begin using ASDM
Not finding what you are looking for?

842 views

Ask a Question

Usually answered in minutes!

Top Cisco Computers & Internet Experts

Brad Brown

Level 3 Expert

19187 Answers

Grand Canyon Tech
Grand Canyon Tech

Level 3 Expert

3867 Answers

Sean Wright
Sean Wright

Level 3 Expert

2045 Answers

Are you a Cisco Computer and Internet Expert? Answer questions, earn points and help others

Answer questions

Manuals & User Guides

Loading...