ASDM Installation and troubleshooting

Do the configuration and troubleshoting following by the following article:

Https://supportforums.cisco.com/document/57701/asdm-access-troubleshooting

The Steps are:

1. Download the ASDM file from the Cisco website:

https://software.cisco.com/download/release.html?mdfid=279513399&flowid=62156&softwareid=280775064 &release=7.6.1&relind=available&rellifecycle=&reltype=latest

2. Create TFTP server, and upload this bin file to flash folder in ASA Flash:

Copy tftp flash:/

3. After the bin file have been uploaded to Flash successfully, do the following commands is:

HTTP Server Enable 8443

HTTP 192.168.64.0 255.255.255.0 inside

ASDM Image Flash:/asdm-714.bin

4. In the internal managment computer, use the IE and following ip:port to access the webserver:

https://192.168.64.1:8443

5. Install the Java and ASDM-IDM software.

The brief content in this article is:

---------------------------------

INTRODUCTION

This document provides the basic configuration andtroubleshooting steps for Cisco ASDM access.

Cisco ASDM provides an intuitive graphical user interfacethat makes it easy-to-set up, configure and manage your Cisco sec Urityappliances.

Cisco ASDM can run as a local application or as a Java webstart application.

The following sections would provide an overview of Thecommon issues faced in accessing Cisco ASDM.

BASIC CONFIGURATION

!--Enable listening on port 443--!

HTTP Server Enable

!--Define what subnets in what interface is allowed toaccess the ASDM--!

HTTP <ipsubnet> <subnet mask> <interface>

!--Specify an ASDM image in case of multiple images on Theflash--!

ASDM image<path>

Example:

HTTP Server Enable

HTTP 192.168.1.0255.255.255.0 Inside

ASDM Imageflash:/asdm-623.bin

Verification:

Show ASP Table socket

Protocol Socket localaddress foreignaddress State

SSL 0000375f 192.168.1.1:443 0.0.0.0:* LISTEN

!--This shows, the ASA is listening in its interface onport 443--!

Troubleshootingmethod

Step 1:verify If Youcan ping the ASA from the pc/laptop you can access it on.

Step 2:check thatthe necessary configuration is on place

Commands:

Show Run HTTP [Check if HTTP server is enabled, and HTTP access was allowed on the interfaceyou was trying to access.]

Show Run ASDM [Check that a ASDM image is mentioned, and the version was compatible with Theasa image version.]

Show Flash [Checkthat The ASDM image mentioned is present in the flash.]

Step 3:check thatthe ASA is listening-HTTPS requests on its interface

Commands:

Show ASP table socket [under Local Address, should see<interface ip>:

Step 4:if Step 1 to 3 is correctly done and then your might beencountering one of the problems mentioned in the next section .

ACCESS ERRORS

[Interface IP for all examples are 10.76.75.48]

ASDM Launcher fails

ASDM access worked previously via https://10.76.75.48, butfails when using the-shortcut on your desktop.

This article is from the "Sulan Network" blog, so be sure to keep this source http://zhangfang526.blog.51cto.com/8588740/1774342

ASDM Installation and troubleshooting