Startup Wizard

This chapter describes the ASDM Startup Wizard, which guides you through the initial configuration of the ASA and helps you define basic settings.

Access the Startup Wizard

To access the Startup Wizard, choose one of the following options:

  • Wizards > Startup Wizard.

  • Configuration > Device Setup > Startup Wizard, then click Launch Startup Wizard.

Guidelines for the Startup Wizard

Context Mode Guidelines

The Startup Wizard is not supported in the system context.

Startup Wizard Screens

The actual sequence of screens is determined by your specified configuration selections. Each screen is available for all modes or models unless otherwise noted.

Starting Point or Welcome

  • Click the Modify existing configuration radio button to change the existing configuration.

  • Click the Reset configuration to factory defaults radio button to set the configuration to the factory default values.

    • Check the Configure the IP address of the management interface check box to configure the IP address and subnet mask of the Management 0/0 interface to be different from the default value (192.168.1.1).


    Note


    If you reset the configuration to factory defaults, you cannot undo these changes by clicking Cancel or by closing this screen.


In multiple context mode, this screen does not include any parameters.

Basic Configuration

Set the hostname, domain name, and enable password in this screen.

Interface Screens

The interface screens depend on the mode and model selected.

Outside Interface Configuration (Routed Mode)

  • Configure the IP address of the outside interface (the interface with the lowest security level).

  • Configure the IPv6 address.

Outside Interface Configuration - PPPoE (Routed Mode, Single Mode)

Configure the PPPoE settings for the outside interface.

Management IP Address Configuration (Transparent Mode)

For IPv4, a management IP address is required for each bridge group for both management traffic and for traffic to pass through the ASA. This screen sets the IP address for BVI 1.

Other Interfaces Configuration

Configure parameters for other interfaces.

Static Routes

Configure static routes.

DHCP Server

Configure the DHCP server.

Address Translation (NAT/PAT)

Configures NAT or PAT for inside addresses (the interface with the highest security level) when accessing the outside (the interface with the lowest security level). See the firewall configuration guide for more information.

Administrative Access

  • Configure ASDM, Telnet, or SSH access.

  • Check the Enable HTTP server for HTTPS/ASDM access check box to enable a secure connection to an HTTP server to access ASDM.

  • Check the Enable ASDM history metrics check box.

IPS Basic Configuration

In single context mode, use the Startup Wizard in ASDM to configure basic IPS network configuration. These settings are saved to the IPS configuration, not the ASA configuration. See the IPS quick start guide for more information.

ASA CX Basic Configuration (ASA 5585-X)

You can use the Startup Wizard in ASDM to configure the ASA CX management address and Auth Proxy Port. These settings are saved to the ASA CX configuration, not the ASA configuration. You will also need to set additional network settings at the ASA CX CLI. See the ASA CX quick start guide for information about this screen.

ASA FirePOWER Basic Configuration

You can use the Startup Wizard in ASDM to configure the ASA FirePOWER management address information and accept the end user license agreement (EULA). These settings are saved to the ASA FirePOWER configuration, not the ASA configuration. You will also need to configure some settings in the ASA FirePOWER CLI. For more information, see the chapter on the ASA FirePOWER module in the firewall configuration guide.

Time Zone and Clock Configuration

Configure the clock parameters.

Auto Update Server (Single Mode)

Follow these guidelines to configure an Auto-Update Server:

  • Configure an auto update server by checking the Enable Auto Update Server for ASA check box.

  • Check the Enable Signature and Engine Updates from Cisco.com check box if you have an IPS module. Set the following additional parameters:

    • Enter your Cisco.com username and password, then confirm the password.

    • Enter the start time in hh:mm:ss format, using a 24-hour clock.

Startup Wizard Summary

This screen summarizes all of the configuration settings that you have made for the ASA.

  • Click Back to change any of the settings in previous screens.

  • Choose one of the following:

    • If you ran the Startup Wizard directly from a browser, when you click Finish, the configuration settings that you created through the wizard are sent to the ASA and saved in flash memory automatically.

    • If you ran the Startup Wizard from within ASDM, you must explicitly save the configuration in flash memory by choosing File > Save Running Configuration to Flash.

History for the Startup Wizard

Table 1. History for the Startup Wizard

Feature Name

Platform Releases

Description

Startup Wizard

7.0(1)

This wizard was introduced.

We introduced the Wizards > Startup Wizard screen.

ASA IPS Configuration

8.4(1)

For the ASA IPS module, the IPS Basic Configuration screen was added to the startup wizard. Signature updates for the IPS module were also added to the Auto Update screen. The Time Zone and Clock Configuration screen was added to ensure the clock is set on the ASA; the IPS module gets its clock from the ASA.

We introduced or modified the following screens:

Wizards > Startup Wizard > IPS Basic Configuration


Wizards > Startup Wizard > Auto Update


Wizards > Startup Wizard > Time Zone and Clock Configuration

ASA CX Configuration

9.1(1)

For the ASA CX module, the ASA CX Basic Configuration screen was added to the startup wizard.

We introduced the following screens:

Wizards > Startup Wizard > ASA CX Basic Configuration

ASA FirePOWER Configuration

9.2(2.4)

For the ASA FirePOWER module, the ASA FirePOWER Basic Configuration screen was added to the startup wizard.

We introduced the following screens:

Wizards > Startup Wizard > ASA FirePOWER Basic Configuration