用到的两条命令
write erase
reload
下边是具体的清空过程
==================================================================================================== ciscoasa# write eraseErase configuration in flash memory? [confirm] [OK] ciscoasa# reloadProceed with reload? [confirm] ciscoasa#
*** *** --- START GRACEFUL SHUTDOWN --- Shutting down isakmp Shutting down File system
*** *** --- SHUTDOWN NOW ---
Rebooting....
CISCO SYSTEMS Embedded BIOS Version 1.0(12)11 04/30/08 15:45:41.19
Low Memory: 632 KB High Memory: 251 MB PCI Device Table. Bus Dev Func VendID DevID Class Irq 00 01 00 1022 2080 Host Bridge 00 01 02 1022 2082 Chipset En/Decrypt 11 00 0C 00 1148 4320 Ethernet 11 00 0D 00 177D 0003 Network En/Decrypt 10 00 0F 00 1022 2090 ISA Bridge 00 0F 02 1022 2092 IDE Controller 00 0F 03 1022 2093 Audio 10 00 0F 04 1022 2094 Serial Bus 9 00 0F 05 1022 2095 Serial Bus 9
Evaluating BIOS Options ... Launch BIOS Extension to setup ROMMON
Cisco Systems ROMMON Version (1.0(12)11) #4: Thu May 1 14:50:05 PDT 2008
Platform ASA5505
Use BREAK or ESC to interrupt boot. Use SPACE to begin boot immediately. Launching BootLoader... Default configuration file contains 1 entry.
Searching / for p_w_picpaths to boot.
Loading /asa724-k8.bin... Booting... ########################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################## 256MB RAM
Total SSMs found: 0
Total NICs found: 10 88E6095 rev 2 Gigabit Ethernet @ index 09 MAC: 0000.0003.0002 88E6095 rev 2 Ethernet @ index 08 MAC: 0024.1456.3f63 88E6095 rev 2 Ethernet @ index 07 MAC: 0024.1456.3f62 88E6095 rev 2 Ethernet @ index 06 MAC: 0024.1456.3f61 88E6095 rev 2 Ethernet @ index 05 MAC: 0024.1456.3f60 88E6095 rev 2 Ethernet @ index 04 MAC: 0024.1456.3f5f 88E6095 rev 2 Ethernet @ index 03 MAC: 0024.1456.3f5e 88E6095 rev 2 Ethernet @ index 02 MAC: 0024.1456.3f5d 88E6095 rev 2 Ethernet @ index 01 MAC: 0024.1456.3f5c y88acs06 rev16 Gigabit Ethernet @ index 00 MAC: 0024.1456.3f64
Licensed features for this platform: Maximum Physical Interfaces : 8 VLANs : 3, DMZ Restricted Inside Hosts : 10 Failover : Disabled ×××-DES : Enabled ×××-3DES-AES : Disabled ××× Peers : 10 Web××× Peers : 2 Dual ISPs : Disabled VLAN Trunk Ports : 0
This platform has a Base license.
Encryption hardware device : Cisco ASA-5505 on-board accelerator (revision 0x0) Boot microcode : CNlite-MC-Boot-Cisco-1.2 SSL/IKE microcode: CNlite-MC-IPSEC-Admin-3.03 IPSec microcode : CNlite-MC-IPSECm-MAIN-2.05
Cisco Adaptive Security Appliance Software Version 7.2(4)
****************************** Warning ******************************* This product contains cryptographic features and is subject to United States and local country laws governing, import, export, transfer, and use. Delivery of Cisco cryptographic products does not imply third-party authority to import, export, distribute, or use encryption. Importers, exporters, distributors and users are responsible for compliance with U.S. and local country laws. By using this product you agree to comply with applicable laws and regulations. If you are unable to comply with U.S. and local laws, return the enclosed items immediately.
A summary of U.S. laws governing Cisco cryptographic products may be found at:
If you require further assistance please contact us by sending email to . ******************************* Warning *******************************
Copyright (c) 1996-2008 by Cisco Systems, Inc.
Restricted Rights Legend
Use, duplication, or disclosure by the Government is subject to restrictions as set forth in subparagraph (c) of the Commercial Computer Software - Restricted Rights clause at FAR sec. 52.227-19 and subparagraph (c) (1) (ii) of the Rights in Technical Data and Computer Software clause at DFARS sec. 252.227-7013.
Cisco Systems, Inc. 170 West Tasman Drive San Jose, California 95134-1706
Configuration has non-ASCII characters and will be ignored.
Cryptochecksum (changed): d41d8cd9 8f00b204 e9800998 ecf8427e Pre-configure Firewall now through interactive prompts [yes]? n 是否进行交互工操作 这里选N就可以了。 ciscoasa> ciscoasa> en Password: ciscoasa# sh run : Saved : ASA Version 7.2(4) ! hostname ciscoasa enable password 8Ry2YjIyt7RRXU24 encrypted passwd 2KFQnbNIdI.2KYOU encrypted names ! interface Vlan1 no nameif no security-level no ip address ! interface Ethernet0/0 shutdown ! interface Ethernet0/1 shutdown ! interface Ethernet0/2 shutdown ! interface Ethernet0/3 shutdown ! interface Ethernet0/4 shutdown ! interface Ethernet0/5 shutdown ! interface Ethernet0/6 shutdown ! interface Ethernet0/7 shutdown ! ftp mode passive pager lines 24 icmp unreachable rate-limit 1 burst-size 1 no asdm history enable arp timeout 14400 timeout xlate 3:00:00 timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02 timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00 timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00 timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute no snmp-server location no snmp-server contact snmp-server enable traps snmp authentication linkup linkdown coldstart telnet timeout 5 ssh timeout 5 console timeout 0
! class-map inspection_default match default-inspection-traffic ! ! policy-map type inspect dns preset_dns_map parameters message-length maximum 512 policy-map global_policy class inspection_default inspect dns preset_dns_map inspect ftp inspect h323 h225 inspect h323 ras inspect netbios inspect rsh inspect rtsp inspect skinny inspect esmtp inspect sqlnet inspect sunrpc inspect tftp inspect sip inspect xdmcp ! service-policy global_policy global prompt hostname context Cryptochecksum:d41d8cd98f00b204e9800998ecf8427e : end