asa恢复ios文档

《asa恢复ios文档》由会员上传分享，免费在线阅读，更多相关内容在教育资源-天天文库。

1、防火墙不断启动UseBREAKorESCtointerruptboot.UseSPACEtobeginbootimmediately.按下ESC进入监控模式监控模式下的显示和交换机路由器没有什么区别。命令格式也大同小异只要大家变通一下就不难恢复。rommon#1>？Variables:Use"sync"tostoreinNVRAMADDRESS=localIPaddressCONFIG=configfilepath/nameGATEWAY=gatewayIPaddressIMAGE=imagefilepath/nameLINKTIMEOUT=LinkUPtimeout(sec

2、onds)PKTTIMEOUT=packettimeout(seconds)PORT=ethernetinterfaceportRETRY=PacketRetryCount(Ping/TFTP)SERVER=serverIPaddressVLAN=enable/disableDOT1Qtaggingontheselectedportrommon#2>ADDRESS=192.168.0.2（因为是TFFP上传，所以防火墙设置为客户机）rommon#3>GATEWAY=192.168.0.1（网关）rommon#4>IMAGE=asa802-k8.bin（导入IOS的名称）rom

3、mon#5>SERVER=192.168.0.1（服务器IP，也就是你的PC）rommon#6>sync（保存）UpdatingNVRAMParameters...rommon#7>ping192.168.0.1Sending20,100-byteICMPEchoesto192.168.0.1,timeoutis4seconds:?!!!!!!!!!!!!!!!!!!!Successrateis95percent(19/20)确认线路是否连通，开启TFTP软件（这里说明下我测试是ASA5505所以接的E0/0口。不知道设备该接什么口可以用set看“PORT=Ethernet0

4、/0”）rommon#8>tftpdnld（上传）ROMMONVariableSettings:ADDRESS=192.168.0.2SERVER=192.168.0.1GATEWAY=192.168.0.1PORT=Ethernet0/0VLAN=untaggedIMAGE=asa802-k8.binCONFIG=LINKTIMEOUT=20PKTTIMEOUT=4RETRY=20tftpasa802-k8.bin@192.168.0.1via192.168.0.1!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!导入后设备重

5、启，现在有了IOS能进去Typehelpor'?'foralistofavailablecommands.ciscoasa>en但现在IOS也没有装入设备，而是从tftp引导启动设备，断开TFTP服务器就会从新进入监控模式。这一点当设备启动完毕后可以用showversion命令看到：Systemimagefileis"tftp://192.168.0.1/asa802-k8.bin"现在需要把IOS存入设备，但是现在防火墙和PC已经不能通信ciscoasa#ping192.168.0.1Typeescapesequencetoabort.Sending5,100-byteIC

6、MPEchosto192.168.0.1,timeoutis2seconds:Noroutetohost192.168.0.1Successrateis0percent(0/1)因为刚才是在监控模式下，现在需要配置让PC和防火墙从新通信（具体型号具体设置，下面已我手上的5505为例）interfaceVlan1nameifinsidesecurity-level100ipaddress192.168.1.1255.255.255.0!interfaceVlan2nameifoutsidesecurity-level0ipaddress192.168.0.2255.255.25

7、5.0!interfaceEthernet0/0switchportaccessvlan2现在测试ciscoasa#ping192.168.1.1Typeescapesequencetoabort.Sending5,100-byteICMPEchosto192.168.1.1,timeoutis2seconds:!!!!!Successrateis100percent(5/5),round-tripmin/avg/max=1/1/1ms已经能通信，下面拷贝IOS和ASDM存入设备ciscoasa#cop