How do I find the preshared key value on an ASA Firewall?
Thanks to: https://community.cisco.com/
You most likely have the following command enabled:
key config-key password-encryption
you can remove it by using the no version of the command but you will need the "master passphrase" password that was used to create the encryption to be able to decrypt it.
ciscoasa(config)# more system:running-config | in key
key CISCO
key CISCO
ciscoasa(config)# key config-key password-encryption
New key: ********
Confirm key: ********
ciscoasa(config)#
ciscoasa(config)# more system:running-config | in key
key 8 J3z3YkeRt3Ciw/ZIpRu93MGHEMM2
New key: ********
Confirm key: ********
ciscoasa(config)#
ciscoasa(config)# more system:running-config | in key
key 8 J3z3YkeRt3Ciw/ZIpRu93MGHEMM2
There is no easy way to remove it if you do not have the master key...If you MUST have the aaa key you will need to backup your configuration, issue a write erase, and reload. Then load your configuration again.
--
Comentarios
Publicar un comentario
Dime si la información de este blog te sirvio.