View unknown IPsec pre-shared key

Question

I've inherited a Cisco ASA 5510. It was configured by the company that installed it but I don't have any documentation on it.

IPsec VPN is enabled and a pre-shared IKE key is inputted but we do not know what this key is. Is there a way to retrieve the key or can I only reset it?

I would look at a client configuration for the key, but all our clients are configured AnyConnect SSL VPN.

Does `show run` obfuscate the IKE key? – Kyle Smith Feb 28 '12 at 22:21 — Kyle Smith, Feb 28 '12 at 22:21
Comes out as: `pre-shared-key *****` – Jagger Feb 29 '12 at 14:41 — Jagger, Feb 29 '12 at 14:41

resmon6 · Accepted Answer · 2012-06-29T15:40:22.463

4

A more system:running-config should show you all of your keys in plain text.

edited Jun 29 '12 at 15:40

answered Feb 28 '12 at 22:41

resmon6

1,352
6
8

`pre-shared-key *****` – Jagger Feb 29 '12 at 14:47
2

try `more system:running-config` – resmon6 Feb 29 '12 at 15:15
Yep, `more system:running-config` showed the command in plain text. Thank you! – Jagger Feb 29 '12 at 16:38
1

If that worked for you please select @resmon6 as the correct answer. – Kyle Smith Mar 01 '12 at 02:18

score 0 · Answer 2 · answered Mar 14 '12 at 23:20

0

@resmon6 answer is excellent, but for the sake of completeness - if you save the config to a tftp server using copy running-config tftp passwords etc. are not obfuscated.

answered Mar 14 '12 at 23:20

dunxd

9,632
22
81
118

View unknown IPsec pre-shared key

2 Answers2