«

»

Feb 21

Cisco ASA 8.4 on GNS3

I struggled quite a lot of get ASA 8.4 working on GNS3. I had 8.0(2) working and was helping to test the configurations and VPNs but now wanted to get 8.4 running such that I can prepare myself for new NAT statements and migration from 8.0(2) to 8.4(2).

Here are the steps to get it working. All links to any images or keys are removed for legal reasons. Once its gone its gone.

1. Download the ASA 8.4 files for GNS3 from the following address

I am afraid you will have to search google for reputable sources to get firewall ASA842 image. Please dont ask here for the image.

2. Configure GNS3 as following. ( I am using Ver 0.8.2 Beta 2, Also Tested 8.3 with Windows 7 64 bit which worked without any issues).  Type the code below into relevant fields

 

Qemu Options: -vnc none -vga none -m 1024 -icount auto -hdachs 980,16,32
Kernel cmd line: -append ide_generic.probe_mask=0x01 ide_core.chs=0.0:980,16,32 auto nousb console=ttyS0,9600 bigphysarea=65536
 
Configure the paths for Initrd and Kernel to where you have extracted the files.
 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

3. Once the firewall is up and running use following activation keys

Again the activation keys are in public domain so get it using your search capabilities.

 

It will take a while (10-15 min) to accept the second activation key and will take the same time at first reboot.

That's all done and we have a working firewall to play with.

 

 

Now if you want to run two ASAs, you will have to change the Qemu options on the second firewall as below

Qemu Options: -vnc :2 none -vga none -m 1024 -icount auto -hdachs 980,16,32

 

Troubleshooting:

Please check the comments at the end of post where you will find different ways to resolve issues if you face any. Specially very helpfull comments from GD and are detailed below

 

Download and install the latest version of GNS3 0.8.2 after that download the •Qemu 0.13.0 patched 32 bits binary for Windows from
 
 
Copy and replace all downloaded qemu files and folders with existing qemu files and folders under GNS3 folder.

 

After you have ASA running in GNS and want to play with ASDM, here is the guide to follow

http://www.xerunetworks.com/2012/03/asa-84-asdm-on-gns3-step-by-step-guide/

 

and if you want to connect two GNS3 networks running on two different PCs, use following

http://www.xerunetworks.com/2012/03/connect-gns3-network-to-real-networks-other-gns3-network/

I have posted a LAB Guide for migrating NAT from 8.2 to 8.3/8.4 Version, which is still work in progress but has a lot of stuff already added into it

http://www.xerunetworks.com/2012/03/asa-8384-nat-migration-lab-guide/

349 comments

13 pings

Skip to comment form

  1. Mulan

    ASA has been garbage since the update, fuuuuuuuuuuuuuuu!

  2. Mohammad Tawrit

    is it workable on windows XP? I can load it but once I try to start ASA it doesn’t. Can anyone help me?

    1. Phil

      Try a 64 bit OS with as much RAM as you can afford. Win 8 with 6 Gig RAM works fine for my needs.. XP’s 32 bit memory restrictions are not really helpfull.

  3. KC

    is this going to work on GNS3 for MAC?????

    1. ibev

      Hello KC.
      I run GNS3 with 2 ASA’s and a bunch of routers and VBox installs of xp and Win7 ALL on a MAC PRO 10.8x.
      The new version works great. Just follow al of the instructions. The ASA can be tricky with the Qemu settings.

  4. Faizan

    Thanks Buddy… Really helpful !!

  5. adilmhaisker

    Had anybody told u that u r Awesome???
    πŸ™‚

  6. Salim

    I am working with GNS3-0.8.3.1-all-in-one, at beginning ASA842 image worked fine and i entered to enable mode. I closed and tried to create a new scenario after activating it as mentioned in those steps.

    Problem is:

    1.connection out [something like that , now its new trouble so i cant c that again]
    2.after loading image , i am not able to console. black screen

    Can u help me on this plz.

  7. Mag

    Using the above activation-key (2nd one) but my AnyConnect Mobile feature is still disabled! Any thoughts on why?

    Regards,

    Mag

    1. peter taylor

      yes with this configuration it works fine

  8. hurricane

    Thanks, its very helpful πŸ™‚

  9. krishna

    Dear Team,

    can any one tell me same thing will work in gns3 new version ..?
    i tried …it’s not working for me….can u help me out plz…

  10. mahad

    very helpfull information

1 14 15 16 17 18 21

Leave a Reply to Que Cancel reply

%d bloggers like this: