«

»

Feb 21

Cisco ASA 8.4 on GNS3

I struggled quite a lot of get ASA 8.4 working on GNS3. I had 8.0(2) working and was helping to test the configurations and VPNs but now wanted to get 8.4 running such that I can prepare myself for new NAT statements and migration from 8.0(2) to 8.4(2).

Here are the steps to get it working. All links to any images or keys are removed for legal reasons. Once its gone its gone.

1. Download the ASA 8.4 files for GNS3 from the following address

I am afraid you will have to search google for reputable sources to get firewall ASA842 image. Please dont ask here for the image.

2. Configure GNS3 as following. ( I am using Ver 0.8.2 Beta 2, Also Tested 8.3 with Windows 7 64 bit which worked without any issues).  Type the code below into relevant fields

 

Qemu Options: -vnc none -vga none -m 1024 -icount auto -hdachs 980,16,32
Kernel cmd line: -append ide_generic.probe_mask=0x01 ide_core.chs=0.0:980,16,32 auto nousb console=ttyS0,9600 bigphysarea=65536
 
Configure the paths for Initrd and Kernel to where you have extracted the files.
 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

3. Once the firewall is up and running use following activation keys

Again the activation keys are in public domain so get it using your search capabilities.

 

It will take a while (10-15 min) to accept the second activation key and will take the same time at first reboot.

That's all done and we have a working firewall to play with.

 

 

Now if you want to run two ASAs, you will have to change the Qemu options on the second firewall as below

Qemu Options: -vnc :2 none -vga none -m 1024 -icount auto -hdachs 980,16,32

 

Troubleshooting:

Please check the comments at the end of post where you will find different ways to resolve issues if you face any. Specially very helpfull comments from GD and are detailed below

 

Download and install the latest version of GNS3 0.8.2 after that download the •Qemu 0.13.0 patched 32 bits binary for Windows from
 
 
Copy and replace all downloaded qemu files and folders with existing qemu files and folders under GNS3 folder.

 

After you have ASA running in GNS and want to play with ASDM, here is the guide to follow

http://www.xerunetworks.com/2012/03/asa-84-asdm-on-gns3-step-by-step-guide/

 

and if you want to connect two GNS3 networks running on two different PCs, use following

http://www.xerunetworks.com/2012/03/connect-gns3-network-to-real-networks-other-gns3-network/

I have posted a LAB Guide for migrating NAT from 8.2 to 8.3/8.4 Version, which is still work in progress but has a lot of stuff already added into it

http://www.xerunetworks.com/2012/03/asa-8384-nat-migration-lab-guide/

336 comments

11 pings

Skip to comment form

  1. win

    Hi I am having no luck running 2 ASA on Windows 7 64bit. I’ve installed GNS3 0.8.6 and followed all the steps in this post. I can run single ASA without any issues, but when I start the second ASA qemu crashes reporting “qemu.exe has stopped working”

    Any help is much appreciated. I’ve already wasted 2 days trying o make this work. Below is my gns.ini file

    [GNS3]
    version=0.8.6
    lang=en
    project_startup=true
    relative_paths=true
    auto_screenshot=true
    slow_start=10
    autosave=0
    console=SuperPutty.exe -telnet \”%h -P %p -wt \”%d\” -gns3 5 -skin 4\”
    serial_console=SuperPutty.exe -serial \”%s -wt \”%d\” -gns3 5 -skin 4\”
    term_close_on_delete=true
    use_shell=true
    bring_console_to_front=false
    gui_show_status_points=true
    gui_use_manual_connection=true
    gui_draw_selected_rectangle=true
    project_directory=C:\\2013\\LAB\\GNS3_lab
    ios_directory=C:\\2013\\LAB\\IOS
    scene_width=2000
    scene_height=1000
    auto_check_for_update=true
    last_check_for_update=1399888371
    console_delay=1
    debug_level=0

    [Dynamips]
    hypervisor_path=dynamips.exe
    hypervisor_port=7200
    hypervisor_baseUDP=10001
    hypervisor_baseConsole=2101
    hypervisor_baseAUX=2501
    hypervisor_working_directory=C:\\2013\\LAB\\GNS3_lab\\TEMP
    clean_working_directory=true
    dynamips_ghosting=true
    dynamips_sparsemem=true
    dynamips_jitsharing=true
    dynamips_mmap=true
    hypervisor_memory_usage_limit=512
    detected_version=0.2.10-x86/Windows stable)
    hypervisor_udp_incrementation=100
    hypervisor_manager_import=true
    allocate_hypervisor_per_IOS=true
    hypervisor_manager_binding=127.0.0.1

    [Qemu]
    qemuwrapper_path=qemuwrapper.exe
    qemuwrapper_working_directory=C:\\2013\\LAB\\GNS3_lab\\TEMP
    qemu_path=qemu.exe
    qemu_img_path=qemu-img.exe
    external_hosts=127.0.0.1:10525
    enable_QemuWrapperAdvOptions=true
    enable_QemuManager=true
    qemu_manager_import=true
    qemu_manager_binding=127.0.0.1
    send_paths_external_Qemuwrapper=false
    qemuwrapper_port=10525
    qemuwrapper_baseUDP=40000
    qemuwrapper_baseConsole=3001

    [VBox]
    vboxwrapper_path=vboxwrapper.exe
    vboxwrapper_working_directory=C:\\2013\\LAB\\GNS3_lab\\TEMP
    external_hosts=127.0.0.1:11525
    use_VBoxVmnames=true
    enable_VBoxWrapperAdvOptions=false
    enable_VBoxAdvOptions=true
    enable_GuestControl=false
    enable_VBoxManager=true
    vbox_manager_import=true
    vbox_manager_binding=127.0.0.1
    vboxwrapper_port=11525
    vboxwrapper_baseUDP=20900
    vboxwrapper_baseConsole=3501

    [IOS.hypervisors]
    2\host=127.0.0.1
    2\port=7202
    2\working_directory=
    2\base_udp=10201
    2\base_console=2141
    2\base_aux=2541
    3\host=127.0.0.1
    3\port=7203
    3\working_directory=
    3\base_udp=10301
    3\base_console=2161
    3\base_aux=2561
    0\host=127.0.0.1
    0\port=7200
    0\working_directory=
    0\base_udp=10001
    0\base_console=2101
    0\base_aux=2501
    1\host=127.0.0.1
    1\port=7201
    1\working_directory=
    1\base_udp=10101
    1\base_console=2121
    1\base_aux=2521
    6\host=127.0.0.1
    6\port=7206
    6\working_directory=
    6\base_udp=10601
    6\base_console=2221
    6\base_aux=2621
    4\host=127.0.0.1
    4\port=7204
    4\working_directory=
    4\base_udp=10401
    4\base_console=2181
    4\base_aux=2581
    5\host=127.0.0.1
    5\port=7205
    5\working_directory=
    5\base_udp=10501
    5\base_console=2201
    5\base_aux=2601

    [ASA.images]
    10\name=ASA 8.4(2)
    10\memory=1024
    10\nic_nb=6
    10\usermod=false
    10\nic=e1000
    10\options=”-vnc none -vga none -m 1024 -icount auto -hdachs 980,16,32″
    10\kvm=false
    10\monitor=false
    10\initrd=C:\\2014\\ASA\\IOS\\ASA-GNS3\\asa842-initrd.gz
    10\kernel=C:\\2014\\ASA\\IOS\\ASA-GNS3\\asa842-vmlinuz
    10\kernel_cmdline=”-append ide_generic.probe_mask=0×01 ide_core.chs=0.0:980,16,32 auto nousb console=ttyS0,9600 bigphysarea=65536″
    11\name=ASA2
    11\memory=512
    11\nic_nb=6
    11\usermod=false
    11\nic=e1000
    11\options=”-vnc :2 none -vga none -m 1024 -icount auto -hdachs 980,16,32″
    11\kvm=false
    11\monitor=false
    11\initrd=C:\\2013\\LAB\\IOS\\ASA3\\asa842-initrd.gz
    11\kernel=C:\\2013\\LAB\\IOS\\ASA3\\asa842-vmlinuz
    11\kernel_cmdline=”-append ide_generic.probe_mask=0×01 ide_core.chs=0.0:980,16,32 auto nousb console=ttyS0,9600 bigphysarea=65536″

1 17 18 19

  1. Assistance in GNS3

    […] PM #2 Everything you need is in here Cisco ASA 8.4 on GNS3 – XeruNetworks Working on CCNP Security FIREWALL, VPN and IPS passed! Quote […]

  2. GNS3 – ASA on Mac OSX | IPv6 Freely

    […] http://www.xerunetworks.com/2012/02/cisco-asa-84-on-gns3/ NOTE:  You don’t know…links fall of the Internet all the time, you might have to Google “GNS3 ASA 8.42″ to find a suitable download location. […]

  3. Como configurar un Firewall ASA 8.4 en GNS3 | Redes Cisco.NET

    [...] Fuente: http://www.xerunetworks.com/2012/02/cisco-asa-84-on-gns3/ [...]

  4. Cisco ASA 8.4 on GNS 3 | » Ali's Technology Blog

    [...] was able to use the following site to get the right files for this setup, XeruNetworks. Once you install GNS3 successfully here are some of the first [...]

  5. ASA 8.3/8.4 NAT Migration Lab Guide - My Tech World » My Tech World

    [...] « Cisco ASA 8.4 on GNS3 [...]

Leave a Reply

%d bloggers like this: