Feb 21

Cisco ASA 8.4 on GNS3

I struggled quite a lot of get ASA 8.4 working on GNS3. I had 8.0(2) working and was helping to test the configurations and VPNs but now wanted to get 8.4 running such that I can prepare myself for new NAT statements and migration from 8.0(2) to 8.4(2).

Here are the steps to get it working. All links to any images or keys are removed for legal reasons. Once its gone its gone.

1. Download the ASA 8.4 files for GNS3 from the following address

I am afraid you will have to search google for reputable sources to get firewall ASA842 image. Please dont ask here for the image.

2. Configure GNS3 as following. ( I am using Ver 0.8.2 Beta 2, Also Tested 8.3 with Windows 7 64 bit which worked without any issues).  Type the code below into relevant fields


Qemu Options: -vnc none -vga none -m 1024 -icount auto -hdachs 980,16,32
Kernel cmd line: -append ide_generic.probe_mask=0x01 ide_core.chs=0.0:980,16,32 auto nousb console=ttyS0,9600 bigphysarea=65536
Configure the paths for Initrd and Kernel to where you have extracted the files.


























3. Once the firewall is up and running use following activation keys

Again the activation keys are in public domain so get it using your search capabilities.


It will take a while (10-15 min) to accept the second activation key and will take the same time at first reboot.

That's all done and we have a working firewall to play with.



Now if you want to run two ASAs, you will have to change the Qemu options on the second firewall as below

Qemu Options: -vnc :2 none -vga none -m 1024 -icount auto -hdachs 980,16,32



Please check the comments at the end of post where you will find different ways to resolve issues if you face any. Specially very helpfull comments from GD and are detailed below


Download and install the latest version of GNS3 0.8.2 after that download the •Qemu 0.13.0 patched 32 bits binary for Windows from
Copy and replace all downloaded qemu files and folders with existing qemu files and folders under GNS3 folder.


After you have ASA running in GNS and want to play with ASDM, here is the guide to follow



and if you want to connect two GNS3 networks running on two different PCs, use following


I have posted a LAB Guide for migrating NAT from 8.2 to 8.3/8.4 Version, which is still work in progress but has a lot of stuff already added into it



13 pings

Skip to comment form

  1. ato

    ciscoasa(config)# asdm image flash:asdm-647.bin
    Device Manager image set, but not a valid image file flash:asdm-647.bin

  2. usaKKK

    DynamIP CONNECTIOn CLOSED error resolved onWin 8.1 64 bit.

    upadating to GNS 8.6 appears to be causing this error.

    downgrade to GNS 8.3.1 and it worked for me. here is the old version

  3. Khalid

    Please help me as I can not ping host from ASA Spent much time but still shows ???? instead of !!!!! , i have also added per icmp any inside.

  4. Artem

    My consolr tells /dev/hda1: No such file or directory and ASA just continues rebooting
    REBOOT: open message queue fail: No such file or directory/2

  5. ac

    I do everything here and assign to the MS loopback for the cloud and then to the eth1 on asa but still cannot ping from asa..Why?

  6. Namasivayam


    Software Details:
    Cisco asdm-647.bin
    Windows 7 32 bit O/s
    Internet Explorer version 9
    GNS3 0.8.6

    Qemu Options: -vnc none -vga none -m 1024 -icount auto -hdachs 980,16,32
    Kernel cmd line: -append ide_generic.probe_mask=0x01 ide_core.chs=0.0:980,16,32 auto nousb console=ttyS0,9600 bigphysarea=65536

    ciscoasa(config)#interface gigabitEthernet 0
    ciscoasa(config-if)#ip address
    ciscoasa(config-if)#nameif inside
    ciscoasa(config-if)#no shutdown
    Type escape sequence to abort.
    Sending 5, 100-byte ICMP Echos to, timeout is 2 seconds:
    Success rate is 100 parcent (5/5), round-trip min/avg/max = 1/1/1 ms
    ciscoasa(config)#http server enable
    ciscoasa(config)#http inside
    ciscoasa(config)#username cisco password admin privilege 15
    ciscoasa(config)#copy tftp: flash:
    Address or name of remote host[]?
    Source filename []? asdm-647.bin
    Destination filename [asdm-647.bin]?
    ciscoasa(config)#asdm image flash:asdm-647.bin
    ciscoasa(config)#wr mem
    Step 1: Go to IE Browser
    Step 2: Type
    Step 3: I Enter username and password
    Step 4: I install Run the Asdm
    Step 5: i Enter firewall ip, username and password in asdm launcher
    Step 6: i have one Error unable to launch device manager from
    Step 7: how to solve this error.
    Plz help me any one this problem.

  7. Sam

    Dears I cannot run ASA on Gns3 8.6, 8.4 tried all versions it is prompting some kind of lima_physarea error 2 on Win 7 machine, I am tring to solve this for one week tried all options please let me know the best solution as I can find the device is running but I cannot open a console to it

  8. ABC

    Thanks…..everything seems to work fine only that i can do trunking. I want to use it as a lab for CCNA Security as taught by Keith Barker but i can’t configure the ethernet ports.

  9. Mahammad Imran


    I am able to run 842ASA but its not pinging to loopback interface from GNS3 kindly provide the sollutuin

    1. ac

      Got the same issue…Were you able to solve it?

  1. Assistance in GNS3

    […] PM #2 Everything you need is in here Cisco ASA 8.4 on GNS3 – XeruNetworks Working on CCNP Security FIREWALL, VPN and IPS passed! Quote […]

Leave a Reply to Omega Cancel reply

%d bloggers like this: