Tell me more ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.
up vote 2 down vote favorite

I've inherited a Cisco ASA 5510. It was configured by the company that installed it but I don't have any documentation on it.

IPsec VPN is enabled and a pre-shared IKE key is inputted but we do not know what this key is. Is there a way to retrieve the key or can I only reset it?

I would look at a client configuration for the key, but all our clients are configured AnyConnect SSL VPN.

share|improve this question
Does show run obfuscate the IKE key? – Kyle Smith Feb 28 '12 at 22:21
Comes out as: pre-shared-key ***** – Ryan Feb 29 '12 at 14:41

2 Answers

up vote 4 down vote accepted

A more system:running-config should show you all of your keys in plain text.

share|improve this answer
pre-shared-key ***** – Ryan Feb 29 '12 at 14:47
2  
try more system:running-config – resmon6 Feb 29 '12 at 15:15
Yep, more system:running-config showed the command in plain text. Thank you! – Ryan Feb 29 '12 at 16:38
1  
If that worked for you please select @resmon6 as the correct answer. – Kyle Smith Mar 1 '12 at 2:18
thanks @KyleSmith – resmon6 Mar 1 '12 at 3:15
up vote 0 down vote

@resmon6 answer is excellent, but for the sake of completeness - if you save the config to a tftp server using copy running-config tftp passwords etc. are not obfuscated.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.