Sys Admin Tales » Hardware

Cisco ASA 5505 Initial Configuration Commands

Tom Thrush — Sat, 04 Feb 2012 00:32:29 +0000

One thing I can say about the Startup Wizard in the Cisco ASA 5505, is that it would be kicked out of Hogwarts. Lame joke sure, but so is Cisco for selling something so complex to small businesses. What my customer of eight employees needs is a firewall with the robust dependability of a Cisco PIX with the simplicity of a Linksys. Seems like a no brainer, but since the 2003 purchase, I don’t think Cisco hasn’t done anything even close. Enough of my rant…

Some of the Startup Wizard went okay (like changing the external IP and enable password only), but when it came to changing the inside network, it hung a number of times, once for over 30 minutes, before I turned it off. Turned out I needed to actually change the internal IP address via the command line, but not before wiping out DHCP, because that locks the internal subnet from being changed. Oh yeah, don’t forget to change the subnet from which you can access the internal web server, otherwise you’re locked out of that as well. And yes, I attempted to do this via the ASDM, but it hung every time I tried to change the internal IP address. Sorry, I guess my ranting wasn’t done.

Below are the commands I used to complete the above tasks…

Note: All of these require you to be logged into the “enable” account, i.e. type enable at the command-line in your terminal window and enter the password

Turn DHCP off:
ciscoasa# config term
ciscoasa(config)# no dhcpd enable inside

Updating your internal IP address/subnet (assuming it’s VLAN 1)
ciscoasa# config term
ciscoasa(config)# interface Vlan 1
ciscoasa(config-if)# ip address 10.0.1.1 255.255.255.0
ciscoasa(config-if)# no shut

Adding an outside route (your gateway address (and why isn’t this in the wizard?!?!))
ciscoasa# config term
ciscoasa(config)# route outside 0.0.0.0 0.0.0.0 76.176.56.86 1

Update access to the ADSM (so you can reach it from your new network listed above)
ciscoasa# config term
ciscoasa(config)# http 10.0.1.0 255.255.255.0 inside
ciscoasa(config)# exit
ciscoasa# show run | include http
http 10.0.1.0 255.255.255.0 inside (this shows your new network has access)
http 192.168.1.0 255.255.255.0 inside

Turn on DHCP and configure for use
ciscoasa# config term
ciscoasa(config)# dhcpd address 10.0.1.201-10.0.1.240 inside
ciscoasa(config)# dhcpd dns 10.0.1.10 10.0.1.11
ciscoasa(config)# dhcpd wins 10.0.1.10
ciscoasa(config)# dhcpd lease 3000
ciscoasa(config)# dhcpd domain contoso.com
ciscoasa(config)# dhcpd enable inside

Write running config to flash (saving all of your changes)
ciscoasa# write memory

Restarting your Cisco ASA from command line
ciscoasa# reload noconfirm

Should you post any questions, I’ll be happy to try and help, but I can’t promise anything…

Optimize Windows Settings for SSD

Tom Thrush — Sun, 29 Jan 2012 21:03:26 +0000

So you got a shiny new SSD for your Windows system. As you may or may not know, there is only a finite number of writes to each sector before it becomes unusable, eventually causing the disk to be unusable.

So what can you go to make sure it lasts as long as it can? I’ve gathered a few tips from around the web to help.

Go without a pagefile (if you have at least 2GB of RAM)
Disable automatic disk defragmentation (only Vista and Win 7)
Turn off hibernation
Put a halt to prefetching
If this is a system with two drives move the location of your Temp directory path (and move the pagefile rather than disabling it as above).

Versions after Windows XP actually do make some changes to optimize, but it doesn’t hurt to check. And have fun with your new found (or bought) speed!

Cisco ASA 5505 Software Upgrade

Tom Thrush — Tue, 24 Jan 2012 00:30:54 +0000

So you’re looking to upgrade your Cisco ASA 5505 to the latest and greatest firmware? Well take it from me, don’t update the ASA software first. If the ASDM software is not compatible with the updated ASA version, you will get locked out and have to get out your console cable.

Not so bad, but if your server room is actually a storage closet with the rack eight feet in the air so you have to stand crooked on a ladder, it’s a pain in the back (and a lower, rear facing location as well).

The upgrade process is in fact, quite painless.

Just fire up your ASDM
Go to Tools > Upload Software from Local Computer…
Choose your Image to Upload: (ADSM first, then ASA later)
Browse Local Files… to add the image (.bin file)
Click Upload Image and follow the prompts to finish (they vary depending on image uploaded)

Following the process above for our brand new firewall, the ASDM image reloaded properly to the latest version while the device was running, the ASA software however, did not. Rebooting the ASA loaded everything properly and I was on my way. (Or was I? That’s blog entry to come…)

Disable Prius Beeping when in Reverse

Tom Thrush — Tue, 20 Dec 2011 18:34:52 +0000

If you have a Prius, there’s a good chance you are annoyed by the constant beeping when you put the car in reverse. I can understand if it’s heard outside the car, since it’s almost completely silent when in electric mode, but it only alerts the passengers in the vehicle. Since selling my Corvette, I’ve been driving my wife’s Prius a lot and the beeping was beginning to really grate on me…

After a few searches, here’s what I found (read the steps once before attempting, some of them are time dependent).

Start the car with your foot on the brake as usual.
Press the ODO button until “ODO” appears on the dash display. (If it’s already present, cycle around once to display it again.)
Turn the car off.
Again with your foot on the brake, press POWER to restart your Prius.
Within 6 seconds of starting, press and hold the ODO button for 10 seconds and don’t release it.
You’re still holding the ODO button after 10 seconds, right? Now shift the car into Reverse and quickly press the Park button. You may now release the ODO button.
The odometer display should now show “b on” (if not, start over).
Press the ODO button until the display shows “b off.”
Turn the car off by pressing the POWER button.
Start your Prius now, put it reverse and enjoy the silence.

Note: This is supposed to work only with US models, so if you’re abroad it’s up to the kindness of your dealer. And I’ve only tested this on a 2009 Prius, so your mileage may vary :)

So how much does my Nook weigh?

Tom Thrush — Fri, 04 Nov 2011 22:58:11 +0000

I knew it! Every time I put content on my Nook Color it becomes heavier and heavier. I already have 4GB of data on it and the extra .000000000000000001 grams is killing me. (It weighs 15.8 ounces, before adding all that heavy content.)

And this is precisely why I have an eReader. The Nook Color allows me to carry a whole library of IT titles as well as works from every spectrum of printed media, without braking my back or ruining my gas mileage (a former colleague carried about fifteen fat UNIX books in the back of his car everywhere).

I’m not saying that the Nook Color is the best choice, but when I bought mine, it was the only color, non-iPad choice at (or under) $250 that was worth anything. Given a choice today, it would be the Kindle Fire, although Barnes & Noble does have an announcement pending… (Maybe my wife would like a slightly used and loaded Nook Color, it’s not very heavy.)

Pandigital Novel

Tom Thrush — Wed, 15 Dec 2010 21:30:28 +0000

I must say I didn’t have the highest hopes for the Pandigital Novel eReader at $149, but I at least expected it to function for reading.

The out of the box experience was fine. Everything worked and the device’s battery was charged to 97%. It detected my wireless and authenticated effortlessly, no issues with connecting with my Windows 7 laptop, upgrading to the latest firmware or copying epub and pdf files to the file system, which showed up like another drive.

The browser was lackluster and the device settings were limited, but all I really wanted was a device that I could use for reading. It displayed my files correctly and the night-time reading mode was pleasant, since it shows the text in negative (great for reading in bed with the lights out). And this is where I was mostly disappointed…

My problems were the accelerometer, which kept changing from portrait to landscape when at a mild angle or slight turning motion and the less than sensitive touch-screen. I was slowly adjusting to the auto-rotation “feature” by moving the device as little as possible, but the touch screen is what killed it for me. Turning pages can only be accomplished via the touch screen, which took two to five “swipes” each time; which of course takes you out of the material you’re reading and involves far more movement than a light-sleeping spouse would prefer.

Two things on the settings screen would have kept this device in my home: a checkbox to turn off the auto-rotation and the ability to remap the analog rocker switch (the only switch aside from the power) to page turning instead of adjusting the volume (which was available via the touch screen).

I returned the device to Best Buy yesterday and will be likely be purchasing a NOOKcolor in the coming weeks.

Eee PC 2.00 GB (767 MB usable)

Tom Thrush — Tue, 22 Jun 2010 06:05:11 +0000

Today there was a curious case where someone’s Windows 7 Eee PC had 2 GB of RAM, which the operating system was aware of, but only listed as 767 MB available for use.

It turns out that if the Boot Booster is enabled in the BIOS, it limits the amount of usable RAM. To fix this, press F2 during boot-up, go to the Boot menu, use the arrow keys to highlight Boot Booster and press Enter to change it to Disabled. Next press F10 to save, then reboot and you are done.

Note: You may still only have 1.75 GB usable, but that can be blamed on the leeching onboard video.

What’s in my backpack?

Tom Thrush — Mon, 17 May 2010 04:09:44 +0000

Every time I’m heading out the door, I throw a heavy backpack over my shoulder and drop it into my car with a thud.

What’s in this bag I lug around to each client? Of course there’s my HP tc4400 Tablet PC and battery charger, but there’s a whole lot more, in no particular order:

Small TechNet binder (Contents will be another post).
An assortment of small screwdrivers for laptops and PCs alike
Cables: 7′ Ethernet, Cisco serial, USB to PS2 converter, USB to serial, iPhone charger
160 external hard drive, USB (for moving files and dumping images)
Leatherman
A small handful of unlabeled customer access badges and keys
Three USB thumbdrives (1GB, 2GB (BitLockered) and 32GB)
Small metal business card holder
Sharpie and blue pen
Tape measure

HP tc4400 and Windows 7 Boot Failure

Tom Thrush — Mon, 29 Mar 2010 05:54:57 +0000

I’ve been using an HP tc4400 Tablet PC with Windows Vista for quite some time now and thought it was about time I started using Windows 7 for work and not just home.

Don’t get me wrong, I do like Vista (I think I may be only one of eight people), but as an IT professional I should be using the latest operating system.

So I got started with swapping out the hard drive to start with a fresh install (always the best way to go), and tossed in the install DVD. The install went flawlessly and I followed with Windows Update, as one always should. Upon rebooting the system, it failed to start.

What followed was a large pain in the posterior: After attempting to do a System Restore (it failed, of course), I reinstalled. This time during Windows Update, I deselected some of the likely updates that may have caused the boot failure issue, same result. This process went on five times before I found the (in)correct update:Intel Corp – Display – Mobile Intel(R) 945 Express Chipset Family 16.6MB. Not surprising that it’s a video driver, since those are typically the drivers that will hose a Windows system most often (rather embarrassed it took five tries to find out the obvious). Anyway, the update was released in September, 2009 and is one version behind what is available on the Intel website.

Once I skipped the Windows Update version of the driver and installed latest display driver from Intel, I was in business, actually Windows 7 Professional (can’t MS marketing decide on a consistent nomenclature?).

Network Printer Offline

Tom Thrush — Sat, 09 Jan 2010 06:10:18 +0000

Yesterday I was at a client site where everyone prints directly to the printers, rather than sharing via a print server. One of the PCs kept showing a printer as offline, even though everyone else was printing to it. From the PC you could ping the printer and even browse to the builtin web server to see that it was low on cyan.

After chewing on this for quite a while, I found the issue: a checkbox on the Ports tab “SNMP Status Enabled”, which when checked (along with SNMP turned off on the print device) will result in the printer being listed as Offline. Once the box was unchecked, it was back online and the customer was back to printing once again.