2

I've inherited a Cisco ASA 5510. It was configured by the company that installed it but I don't have any documentation on it.

IPsec VPN is enabled and a pre-shared IKE key is inputted but we do not know what this key is. Is there a way to retrieve the key or can I only reset it?

I would look at a client configuration for the key, but all our clients are configured AnyConnect SSL VPN.

2
  • Does show run obfuscate the IKE key?
    – Kyle Smith
    Feb 28, 2012 at 22:21
  • Comes out as: pre-shared-key *****
    – Jagger
    Feb 29, 2012 at 14:41

2 Answers 2

4

A more system:running-config should show you all of your keys in plain text.

4
  • pre-shared-key *****
    – Jagger
    Feb 29, 2012 at 14:47
  • 2
    try more system:running-config
    – resmon6
    Feb 29, 2012 at 15:15
  • Yep, more system:running-config showed the command in plain text. Thank you!
    – Jagger
    Feb 29, 2012 at 16:38
  • 1
    If that worked for you please select @resmon6 as the correct answer.
    – Kyle Smith
    Mar 1, 2012 at 2:18
0

@resmon6 answer is excellent, but for the sake of completeness - if you save the config to a tftp server using copy running-config tftp passwords etc. are not obfuscated.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .