====== Initial Setup ======

===== default password =====

<code>
ciscoasa> en
Password: <just_enter>
ciscoasa# configure terminal
ciscoasa(config)#
</code>

now you are ready to configure

===== reset factory default =====

=clear config all= or =write erase=

On a new ASA it is a good idea to clear the config anyway, because the initial config is sometimes [[sysadmin:asafactoryconfig|slightly different]]. The factory default config contains some initial configs for the management interface, the webserver and aconfig for a dhcp server. 

===== initial setup =====

You can choose Pre-configure Firewall now through interactive prompts [yes]? choose no, because we will configure it manually. The config seems to be different on fresh unpacked ciscos, eventually you have to throw away any dhcp settings.

<code>
enable
configure terminal
</code>

The IP of the management interface:

<code>
interface Management0/0
 no shutdown
 nameif management
 security-level 100
 ip address 192.168.1.0 255.255.255.0
 management-only
</code>

Webserver and from which IP you can access the webserver:

<code>
http server enable
http 192.168.1.0 255.255.255.255 management
</code>

Now you can use your browser to make some additional setups. https://w.x.y.z Login ''enable_15'' with an empty password.

===== Passwords =====

EXEC password: 

<code>
ciscoasa(config)# passwd xxxxxxxxx
</code>

configures local users and their associated passwords: 

<code>
ciscoasa(config)# username admin password xxxxxxxx privilege 15
</code>

enable password - configures the password used to enter enable mode: 

<code>
ciscoasa(config)# enable password xxxxxxxx
</code>

===== Security Contexts (virtual firewalls) =====

<code>
ciscoasa(config)# mode multiple
WARNING: This command will change the behavior of the device
WARNING: This command will initiate a Reboot
Proceed with change mode? [confirm]
Convert the system configuration? [confirm]
!
The old running configuration file will be written to flash
 
The admin context configuration will be written to flash
 
The new running configuration file was written to flash
Security context mode: multiple
</code>