How to Add Cisco ASAv to EVE-NG

Cisco Adaptive Security Virtual Appliance (ASAv) is a powerful firewall solution for network security. EVE-NG provides a great environment to emulate Cisco ASAv for learning, certification preparation, or testing. This guide outlines the steps to add Cisco ASAv to EVE-NG and obtain a trial license.

By following these steps, you can successfully add Cisco ASAv to your EVE-NG environment. With ASAv, you can simulate advanced security scenarios, enhance your skills, and prepare for certifications like CCIE Security.

Table of Contents

Step 1: Download Cisco ASAv Image

  1. From Cisco Website:
    • Visit Cisco Software Central and download the desired version of the ASAv .qcow2 image (e.g., asav952-204.qcow2).
  2. From Alternate Source:
    • For educational purposes, you may find direct links to ASAv images on trusted community platforms.
Download

Step 2: Upload the ASAv Image to EVE-NG

1. Transfer the Image:
Use FileZilla or WinSCP to upload the ASAv .qcow2 image to your EVE-NG server.

2. Create the Directory:
SSH into the EVE-NG server and create a directory for the ASAv image:

mkdir -p /opt/unetlab/addons/qemu/asav-941-200

3. Move and Rename the Image:
Navigate to the temporary upload location (e.g., /root/tmp) and move the image:

mv asav952-204.qcow2 /opt/unetlab/addons/qemu/asav-941-200/virtioa.qcow2

Step 3: Enable Telnet Access Instead of VNC

1. Install Required Tools:
Update your EVE-NG server and install the necessary tools:

apt-get update apt-get install libguestfs-tools

2. Modify the ASAv Image: Navigate to the image directory:

cd /opt/unetlab/addons/qemu/asav-941-200/

3. Use guestfish to modify the image:

guestfish -a virtioa.qcow2 run

4. Enable Telnet Access:

Once the ASAv image loads, execute the following commands in the guestfish shell:

mount /dev/sda2 / touch /use_ttyS0 umount / exit

Step 4: Fix Permissions

Clean and Fix Permissions: Run the following command to set the correct permissions for the ASAv directory:

/opt/unetlab/wrappers/unl_wrapper -a fixpermissions

Step 5: Add ASAv Node in EVE-NG

  1. Access the EVE-NG Web Interface:
    • Open a browser and log in to the EVE-NG web UI.
  2. Create or Open a Lab:
    • Create a new lab or open an existing one.
  3. Add the ASAv Node:
    • In the node configuration menu, select Cisco ASAv from the node list and add it to the lab topology.
  4. Start the Node:
    • Power on the ASAv node and connect to its console to verify the configuration.
how to add cisco asav images to eve-ng

Step 6: Obtain a Cisco ASAv Trial License

Cisco provides a 30-day free trial license for ASAv. You can obtain it using one of the following methods:

  1. Contact Cisco:
    • Reach out to Cisco Support and request a trial license.
  2. Cisco Smart License Portal:
    • If you have access to Cisco’s Smart License Portal, log in and request a trial license.

Troubleshooting

  • ASAv Not Booting:
    • Ensure the image is correctly named as virtioa.qcow2.
    • Verify the directory structure and permissions.
  • Telnet Not Working:
    • Recheck the steps to enable Telnet and verify the guestfish modifications.
  • ASAv Node Missing in EVE-NG:
    • Ensure the directory is correctly named, and permissions are fixed.

Leave a Comment