Recovery enable password in ASA5510

To recover from the loss of passwords, perform the following steps:

Step 1 Connect to the security appliance console port according to the "Accessing the Command-Line Interface".
Buy and Sell Cisco Network Gear.

Step 2 Power off the security appliance, and then power it on.

Step 3 During the startup messages, press the Escape key when prompted to enter ROMMON.

Step 4 To set the security appliance to ignore the startup configuration at reload, enter the following command:

rommon #1> confreg

The security appliance displays the current configuration register value, and asks if you want to change the value:

Current Configuration Register: 0x00000011

Configuration Summary:

boot TFTP image, boot default image from Flash on netboot failure

Do you wish to change this configuration? y/n [n]:

Step 5 Record your current configuration register value, so you can restore it later.

Step 6 At the prompt, enter Y to change the value.

The security appliance prompts you for new values.

Step 7 Accept the default values for all settings, except for the "disable system configuration?" value; at that prompt, enter Y.

Step 8 Reload the security appliance by entering the following command:

rommon #2> boot

The security appliance loads a default configuration instead of the startup configuration.

Step 9 Enter privileged EXEC mode by entering the following command:

hostname> enable

Step 10 When prompted for the password, press Return.

The password is blank.

Step 11 Load the startup configuration by entering the following command:

hostname# copy startup-config running-config

Step 12 Enter global configuration mode by entering the following command:

hostname# configure terminal

Step 13 Change the passwords in the configuration by entering the following commands, as necessary:

hostname(config)# password password

hostname(config)# enable password password

hostname(config)# username name password password

Step 14 Change the configuration register to load the startup configuration at the next reload by entering the following command:

hostname(config)# config-register value

Where value is the configuration register value you noted in Step 5. 0×1 is the default configuration register. For more information about the configuration register, see the Cisco Security Appliance Command Reference.

Step 15 Save the new passwords to the startup configuration by entering the following command:

hostname(config)# copy running-config startup-config

The VPN Client cannot communicate with DMZ Zone

access-list DMZ_access_in extended permit ip 192.168.3.0 255.255.255.0 192.168.5.0 255.255.255.0




access-list DMZ_nat0_outbound extended permit ip 192.168.5.0 255.255.255.0 192.168.3.0 255.255.255.0

Rules for DVX firewall

DynIPSec Routing Crazy

I've been headache all outgoing traffics are passing through IPSecDyn. It take one day to get solution. It is cuz of I 4got to remove add route option. For Dynamic routing, no need to add static route inside firewall. Once it connected to remote firewall , it will create itself when it willup .


Unchecked Add route

PPOE and DDNS

1) Change Bridge mode in Router
2) Configure PPOE inside Dynamic line firewall






3) Change Wan to PPOE interface in default rules Lan to Wan





4) Create Dyndns account at www.dyndns.com and point to current WanIP you get it from PPOE and create DynDns under Misc inside PPOE firewall





5) Create IP Sec and IP Sec Rules . It's done

Allow Microsft Updates Sites

Need to open google-analytics.com because it's been used by our websites otherwise websites got problems whenever it comes out updates

Teamviewer block on firewall ASA5510

I've used regular expressions for blocking access to certain domains in the past.

This should get you going in the right direction.

regex teamviewer "\.teamviewer\.com"
regex crossloop "\.crossloop\.com"

class-map type regex match-any blockeddomains
(config-cmap)# match regex teamviewer
(config-cmap)# match regex crossloop

For more information
http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080940c5a.shtml

Check out the section on blocking youtube.


For DLINK DFL 1600

http://security.dlink.com.tw/netdefend_ids_view2.asp?sno=32468