Secure Firewall 6100 ASA Getting Started

PDF

Access the ASA CLI

Updated: March 19, 2026

Want to summarize with AI?

Log in

Overview

How to access the ASA CLI on the Secure Firewall 6100 for basic configuration and troubleshooting, including entering privileged EXEC mode and global configuration mode.

You might need to access the CLI for configuration or troubleshooting.

Procedure

1.

Connect to the console port.

Figure 1. Console port
Console port
2.

You connect to the ASA CLI in user EXEC mode. This mode lets you use many show commands.


ciscoasa>
3.

Access privileged EXEC mode. This password-protected mode lets you perform many actions, including accessing configuration modes.

enable

You are prompted to change the password the first time you enter the enable command.

Example:


ciscoasa> enable
Password:
The enable password is not set. Please set it now.
Enter Password: ******
Repeat Password: ******
ciscoasa#
4.

Access global configuration mode.

configure terminal

Example:


ciscoasa# configure terminal
ciscoasa(config)#
5.

Access the FXOS CLI. Use this CLI for troubleshooting at the hardware level.

connect fxos [admin]

  • admin —Provides admin-level access. Without this option, you have read-only access. Note that no configuration commands are available even in admin mode.

You are not prompted for user credentials. The current ASA username is passed through to FXOS, and no additional login is required. To return to the ASA CLI, enter exit or type Ctrl-Shift-6, x.

Example:


ciscoasa# connect fxos admin
Connecting to fxos.
Connected to fxos. Escape character sequence is 'CTRL-^X'.
firepower# 
firepower# exit
Connection with FXOS terminated.
Type help or '?' for a list of available commands.
ciscoasa#