CiscoASA5520# conf t
^
ERROR: % Invalid input detected at '^' marker.
ERROR: Command authorization failed
CiscoASA5520#So, just so you can see, here is what I ran to verify that.
CiscoASA5520# sho curpriv
Username : skillen
Current privilege level : 15 <----- Before this process, it said '2'.
Current Mode/s : P_PRIV
CiscoASA5520#
So, I reboot the ASA to do a password recovery, so that I could reset my privilage level. So, I disconnected the primary ASA interface cables and I type in "reload".
At this point, Im hitting ESC to stop the booting process of the ASA. I then get to ROMMON mode. Below is the process I went through to do a password recovery.
rommon #0> confreg
Current Configuration Register: 0x00000001 <------- Note this number
Configuration Summary:
boot default image from Flash
Do you wish to change this configuration? y/n [n]: y
enable boot to ROMMON prompt? y/n [n]:
enable TFTP netboot? y/n [n]:
enable Flash boot? y/n [n]:
select specific Flash image index? y/n [n]:
disable system configuration? y/n [n]: y <--------- This is the only option you change out of these questions. Type 'Y'.
go to ROMMON prompt if netboot fails? y/n [n]:
enable passing NVRAM file specs in auto-boot mode? y/n [n]:
disable display of BREAK or ESC key prompt during auto-boot? y/n [n]:
Current Configuration Register: 0x00000040 <---------- Notice this config register is different than above.
Configuration Summary:
boot ROMMON
ignore system configuration
Update Config Register (0x40) in NVRAM...
rommon #1> boot
Launching BootLoader...
Boot configuration file contains 1 entry.
Loading disk0:/asa804-k8.bin... Booting...
Loading...
SHORTENED FOR BRIEVITY....
ciscoasa> en
Password:
ciscoasa# copy start run
Destination filename [running-config]?
...INFO: Non-failover interface config is cleared on GigabitEthernet0/2 and its sub-interfaces
INFO: Non-failover interface config is cleared on GigabitEthernet0/3 and its sub-interfaces
INFO: Global 4.4.4.38 will be Port Address Translated
INFO: Global 4.4.4.45 will be Port Address Translated
..WARNING: crypto map has incomplete entries
WARNING: No 'svc image' commands have been issued
..
Cryptochecksum (unchanged):
14389 bytes copied in 2.390 secs (7194 bytes/sec)
CiscoASA5520# config t
CiscoASA5520(config)# no username userlogin
CiscoASA5520(config)# username userlogin pass guessthispassword pri 15
CiscoASA5520(config)# config-register 0x00000001
CiscoASA5520# wr mem
CiscoASA5520# reload
Proceed with reload? [confirm]
CiscoASA5520#
***
*** --- START GRACEFUL SHUTDOWN ---
Shutting down isakmp
Shutting down webvpn
Shutting down File system
***
*** --- SHUTDOWN NOW ---
Rebooting....
Booting system, please wait...
There you go, password reset.
