Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I've inherited a Cisco ASA 5510. It was configured by the company that installed it but I don't have any documentation on it.

IPsec VPN is enabled and a pre-shared IKE key is inputted but we do not know what this key is. Is there a way to retrieve the key or can I only reset it?

I would look at a client configuration for the key, but all our clients are configured AnyConnect SSL VPN.

share|improve this question
Does show run obfuscate the IKE key? – Kyle Smith Feb 28 '12 at 22:21
Comes out as: pre-shared-key ***** – Jagger Feb 29 '12 at 14:41
up vote 4 down vote accepted

A more system:running-config should show you all of your keys in plain text.

share|improve this answer
pre-shared-key ***** – Jagger Feb 29 '12 at 14:47
try more system:running-config – resmon6 Feb 29 '12 at 15:15
Yep, more system:running-config showed the command in plain text. Thank you! – Jagger Feb 29 '12 at 16:38
If that worked for you please select @resmon6 as the correct answer. – Kyle Smith Mar 1 '12 at 2:18
thanks @KyleSmith – resmon6 Mar 1 '12 at 3:15

@resmon6 answer is excellent, but for the sake of completeness - if you save the config to a tftp server using copy running-config tftp passwords etc. are not obfuscated.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.