Neon beach at night

AquaOctet

Tech log from the Digital Depths

NEW POST >>THE IDEAL ROUTER, SIX MONTHS LATER♦PROJECT >>OpenZephyr♦PROJECT >>Jordle♦5 TRANSMISSIONS IN ARCHIVE♦#OPENWRT♦#NETWORKING♦#HOMELAB♦#LTE♦#ESIM♦#TRAVEL♦STACK >>Kubernetes / Terraform / Docker / Helm / ArgoCD / Ansible♦ALSO >>Building the Ideal Router from Scratch♦ALSO >>Deploy Open WebUI in Docker Swarm with Chroma DB and Ollama♦NEW POST >>THE IDEAL ROUTER, SIX MONTHS LATER♦PROJECT >>OpenZephyr♦PROJECT >>Jordle♦5 TRANSMISSIONS IN ARCHIVE♦#OPENWRT♦#NETWORKING♦#HOMELAB♦#LTE♦#ESIM♦#TRAVEL♦STACK >>Kubernetes / Terraform / Docker / Helm / ArgoCD / Ansible♦ALSO >>Building the Ideal Router from Scratch♦ALSO >>Deploy Open WebUI in Docker Swarm with Chroma DB and Ollama

Open Source your blackbox Cisco firewall

[date] 02.14.2022
#networking#cisco#opnsense#linux#homelab#hardware

Cisco is a great network solution for most, but I don't think it is a "one-size-fits-all" solution as most would believe.

Pay-Walls, Closed Source, and Black Box technologies will be the death of Privacy and Security. While Cisco has done a lot and is considered the "gold standard," it isn't ideal for those who care for privacy due to its relation with IBM.

During my search for this deemed "impossible" task, I have found a lot of unusual hate surrounding this topic. I don't understand why, but I hope to save others from the hive-minded's trouble towards questioning and wasting any more precious time.

Some of you reading this may think I am an absurd lunatic, and to a degree, that is totally valid; however, that is beside the point! This article's "point" is to help the curious and interested in tinkering, learning, or even furthering the community and the technologies available. In my opinion, this could be the beginning of what could revolutionize the way admins think of "dated" devices. This is a matter of unlocking doorways and reintroducing the mindset of "what can one make this device do" rather than just using it as is.

This "impossible" task may seem complicated, but I assure you it is a cakewalk! Once opened up, it's as easy as 1-2-3!

Requirements#

  1. Patience, this is a base requirement in general.
  2. A live image of OPNSense flashed to a USB (or whatever OS you want to use)
    • Make sure you review base requirements for your Operating System of choice, I am using OPNSense.
  3. Storage device, I used an SSD; you can use an HDD or a USB drive as your storage. This will go in your ASA and serve as its storage device.
  4. IDC 16 PIN to VGA Adapter ($6 USD from PCCABLES.com)

Get started#

  1. Identify your Device (Cisco ASA Model):

    • Open the ASA up, read documents (that you can find) on your model, look into the specifications
    • On the motherboard, you should see a PINOUT for VGA (16 PIN IDC). This PINOUT will be your entryway into the machine and allow you to bypass ROMMON.
  2. Make your Bootable device:

    • I used Rufus and the VGA OPNSense image. If you are here, I assume you already understand this topic, so I will leave you to your own devices.
  3. Add your parts to the CISCO ASA:

    • I added an SSD to the front of it, 250GB should be more than enough
    • Add RAM if you want; I have 32GB already in mine but it depends on the specs/limits of your device
    • Attach your Adapter and connect the VGA to a screen
    • Attach a keyboard and your bootable device

Show time#

  1. Power on your device and enter the bios (Hitting F2 for me)
    • Boot screen took almost a minute to appear after power-on
  2. In BIOS, Disable ROMMON.
  3. Switch the boot order; Make the USB the primary and HDD (boot device) as secondary.
  4. Save changes and reboot.
  5. Enjoy the POWER! Powering the ASA back on should find the bootable device.
    • Install your Operating system!

Conclusion#

As of writing this, I have OPNSense running on my CISCO ASA-5555X! These modifications have turned this once scrapped device into a fantastic multi-purpose machine for my home network, free of the subscriptions and closed source limitations. The best part is I have control over the device the way I want to have it.

I hope this helps; feel free to reach out -- I love to collaborate and conversate! Let me know your experiences, I have seen ESXi running on these mini powerhouses, which is brilliant!

All the best, ✧~ Aqua ~✧

_□x
>> GUESTBOOK.exe <<

*~* leave a transmission via github issues *~*

entries are pulled from github issues labeled 'guestbook'.

sign the guestbook by opening a new issue:

>> SIGN GUESTBOOK ON GITHUB <<

fetching transmissions from the void

loading...

=====[ END OF TRANSMISSION ]=====

(c) ?!?! - 2026 AquaOctet // ✧~ ~✧

~ visitors ~

∞∞∞∞∞∞

tracked via cloudflare

~* you have reached the bottom of the ocean *~