Secure Firewall 3100 ASA Getting Started

PDF

(Optional) Change the IP address

Updated: March 18, 2026

Want to summarize with AI?

Log in

Overview

How to change the Secure Firewall 3100 management IP address when you cannot use the default ASDM addresses, so you can reach ASDM from your network.

By default, you can launch ASDM from the following interfaces:

  • Ethernet 1/2—192.168.1.1

  • Management 1/1—IP address from DHCP

If you cannot use the default IP address, you can set the IP address of the Ethernet 1/2 interface at the ASA CLI.

Procedure

1.

Connect to the console port and access global configuration mode. See Access the ASA CLI.
2.

Restore the default configuration with your chosen IP address.

configure factory-default [ip_address [mask]]

Example:


ciscoasa(config)# configure factory-default 10.1.1.151 255.255.255.0
Based on the management IP address and mask, the DHCP address
pool size is reduced to 103 from the platform limit 256

WARNING: The boot system configuration will be cleared.
The first image found in disk0:/ will be used to boot the
system on the next reload.
Verify there is a valid image on disk0:/ or the system will
not boot.

Begin to apply factory-default configuration:
Clear all configuration
Executing command: interface ethernet1/2
Executing command: nameif inside
INFO: Security level for "inside" set to 100 by default.
Executing command: ip address 10.1.1.151 255.255.255.0
Executing command: security-level 100
Executing command: no shutdown
Executing command: exit
Executing command: http server enable
Executing command: http 10.1.1.0 255.255.255.0 management
Executing command: dhcpd address 10.1.1.152-10.1.1.254 management
Executing command: dhcpd enable management
Executing command: logging asdm informational
Factory-default configuration is completed
ciscoasa(config)#
3.

Save the default configuration to flash memory.

write memory