ASA防火墻flash被刪處理方法.doc

1、防火墻不斷啟動UseBREAKorESCtointerruptboot.UseSPACEtobeginbootimmediately.按下ESC進入監(jiān)控模式監(jiān)控模式下的顯示和交換機路由器沒有什么區(qū)別。命令格式也大同小異只要大家變通一下就不難恢復。rommon#1>？Variables:Use"sync"tostoreinNVRAMADDRESS=localIPaddressCONFIG=configfilepath/nameGATEWAY=gatewayIPaddressIMAGE=imagefilepath/nameLINKTIMEOUT=LinkUPtimeout

2、（seconds）PKTTIMEOUT=packettimeout（seconds）PORT=ethernetinterfaceportRETRY=PacketRetryCount（Ping/TFTP）SERVER=serverIPaddressVLAN=enable/disableDOT1Qtaggingontheselectedportrommon#2>ADDRESS=（防火墻IP）rommon#3>GATEWAY=（PC機IP）rommon#4>IMAGE=asa803-k8.bin（IOS名稱）rommon#5>SER

3、VER=（PC機IP）rommon#6>sync（保存）UpdatingNVRAMParameters.rommon#7>pingSending20,100-byteICMPEchoesto,timeoutis4seconds:?!Successrateis95percent（19/20）確認線路是否連通，開啟TFTP軟件PC機接在ASA5520的G0/0口上。不知道設備該接什么口可以用set看“PORT=Ethernet0/（或直接輸入PORT=Ethernet0/0rommon#8>tftpdnld（上傳）

4、ROMMONVariableSettings:ADDRESS=SERVER=GATEWAY=PORT=Ethernet0/0VLAN=untaggedIMAGE=asa803-k8.binCONFIG=LINKTIMEOUT=20PKTTIMEOUT=4RETRY=20tftpasa803-k8.binvia!導入后設備重啟，現在有了IOS能進去Typehelpor'?'foralistofavailablecommands.ciscoasa>en但現在IOS也沒

5、有裝入設備，而是從tftp引導啟動設備，斷開TFTP服務器就會從新進入監(jiān)控模式。這一點當設備啟動完畢后可以用showversion命令看到：Systemimagefileis"t/asa803-k8.bin"現在需要把IOS存入設備，但是現在防火墻和PC已經不能通信ciscoasa#pingTypeescapesequencetoabort.Sending5,100-byteICMPEchosto,timeoutis2seconds:NoroutetohostSuccessra

6、teis0percent(0/1)現在需要配置讓PC和防火墻從新通信interfaceVlan1nameifinsidesecurity-level100ipaddress!interfaceVlan2nameifoutsidesecurity-level0ipaddress!interfaceEthernet0/0switchportaccessvlan2現在測試ciscoasa#pingTypeescapesequencetoabort.Sending5,100-byteI

7、CMPEchosto,timeoutis2seconds:!Successrateis100percent(5/5),round-tripmin/avg/max=1/1/1ms已經能通信，下面拷貝IOS和ASDM存入設備ciscoasa#copyt/asa803-k8.bindisk0:/asa803-k8.binAddressornameofremotehost?Sourcefilename?Destinationfilename?Accessingt/asa803-k8.bin.!因為刪除的是flash現

8、在還需要導入ASDM(注意ASDM和IOS的兼容，不兼容如下圖)ciscoasa#copyt/asdm-602.bindisk0:/asdm-602.binAddressornameofremotehost?Sourcefilename?Destinationfilename?Accessingt/asdm-602.bin.!現在可以看見IOS以后在設備上ciscoasa#showversionCiscoAdaptiveSecurityApplianceSoftwareVersion8.2(1)CompiledonTue05-Ma

9、y-0922:45bybuildersSystemimagefileis"disk0:/asa821-k8.bin"Configfileatbootwas"startup-config"ciscoasa#showflash:7816275456Aug26200918:07:50asa803-k8.bin807598456Aug27200909:05:54asdm-602.bin設置啟動文件ciscoasa(config)#bootsystemdisk0:/asa803-k8.bin設置IOSciscoasa(config)#asdmimagedisk0:/asdm602.bin設置ASDMciscoasa(config)#reload重新啟動，配置生效備份上面dir的文件ciscoasa(config)#copydisk0:/asa802-k8.bint/asa803-k8.binciscoa