«

»

Feb 21

Cisco ASA 8.4 on GNS3

I struggled quite a lot of get ASA 8.4 working on GNS3. I had 8.0(2) working and was helping to test the configurations and VPNs but now wanted to get 8.4 running such that I can prepare myself for new NAT statements and migration from 8.0(2) to 8.4(2).

Here are the steps to get it working. All links to any images or keys are removed for legal reasons. Once its gone its gone.

1. Download the ASA 8.4 files for GNS3 from the following address

I am afraid you will have to search google for reputable sources to get firewall ASA842 image. Please dont ask here for the image.

2. Configure GNS3 as following. ( I am using Ver 0.8.2 Beta 2, Also Tested 8.3 with Windows 7 64 bit which worked without any issues).  Type the code below into relevant fields

 

Qemu Options: -vnc none -vga none -m 1024 -icount auto -hdachs 980,16,32
Kernel cmd line: -append ide_generic.probe_mask=0x01 ide_core.chs=0.0:980,16,32 auto nousb console=ttyS0,9600 bigphysarea=65536
 
Configure the paths for Initrd and Kernel to where you have extracted the files.
 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

3. Once the firewall is up and running use following activation keys

Again the activation keys are in public domain so get it using your search capabilities.

 

It will take a while (10-15 min) to accept the second activation key and will take the same time at first reboot.

That's all done and we have a working firewall to play with.

 

 

Now if you want to run two ASAs, you will have to change the Qemu options on the second firewall as below

Qemu Options: -vnc :2 none -vga none -m 1024 -icount auto -hdachs 980,16,32

 

Troubleshooting:

Please check the comments at the end of post where you will find different ways to resolve issues if you face any. Specially very helpfull comments from GD and are detailed below

 

Download and install the latest version of GNS3 0.8.2 after that download the •Qemu 0.13.0 patched 32 bits binary for Windows from
 
 
Copy and replace all downloaded qemu files and folders with existing qemu files and folders under GNS3 folder.

 

After you have ASA running in GNS and want to play with ASDM, here is the guide to follow

http://www.xerunetworks.com/2012/03/asa-84-asdm-on-gns3-step-by-step-guide/

 

and if you want to connect two GNS3 networks running on two different PCs, use following

http://www.xerunetworks.com/2012/03/connect-gns3-network-to-real-networks-other-gns3-network/

I have posted a LAB Guide for migrating NAT from 8.2 to 8.3/8.4 Version, which is still work in progress but has a lot of stuff already added into it

http://www.xerunetworks.com/2012/03/asa-8384-nat-migration-lab-guide/

349 comments

13 pings

Skip to comment form

  1. Cesar Alonso Morera Alpizar

    This option worked for me:

    Instead of this : 10\initrd=C:\\2014\\ASA\\IOS\\ASA-GNS3\\asa842-initrd.gz
    Use this: 10\initrd=C:\\2014\\ASA\\IOS\\ASA-GNS3\\asa842-initrd (* works in windows 10*)

  2. redha

    I have ASA routers device in GNS3 it has problem of restarts every time i add comment

    1. redha

      please give us more explanation

  3. ninh

    ciscoasa#

    Accessing tftp://192.168.1.10/asdm-649.bin…!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! ^!

    %Error copying tftp://192.168.1.10/asdm-649.bin (Not enough space on device)

    i help error of gns3 1.3 tranfer asdm-649 to asa ios 8.4.2

  4. Que

    To get ASA to work change references for initrd and kernel to. Make sure these files are in the path for ASA842 image.

    initrd: asa842-initrd.gz
    kernel: asa842-vmlinuz

    try using the following > (*Works in windows 7*)
    initrd: asa842-initrd
    kernel: asa842-vmlinuz.gz

1 19 20 21

Leave a Reply to Kaustubh Cancel reply

%d bloggers like this: