topic Re: ASA-5500 install SFR module Help (111 Code failure) in Network Security

ASA-5500 install SFR module Help (111 Code failure)

Kgrevemberg — Tue, 12 Mar 2019 14:07:36 GMT

Hi,

I am trying to install an SFR module on an ASA 5525.

I'm using asasfr-5500x-boot-6.2.3-4 image to install the SFR.

And trying to load asasfr-sys-6.2.3-83.pkg into the module.

Within the SFR module im using this command:

asasfr-boot >system install ftp://1.1.1.1/asasfr-sys-6.2.3-83.pkg

I have the file loaded on a tftp32 server.

Here is the output from the sfr module when it attempts though:

asasfr-boot >system install http://1.1.1.1/asasfr-sys-6.2.3-83.pkg
Verifying

111
Upgrade Aborted

Does anyone know what I'm doing wrong? I used the same tftp server to load the asa with the boot image fine. I can ping the tftp server from the SFR module. Both files are from the same file page on cisco's website for the 6.2.3 version.

Thanks for your help.

Re: ASA-5500 install SFR module Help (111 Code failure)

matty-boy — Tue, 27 Nov 2018 20:24:04 GMT

Hi,

You need to install a major release (6.2.3 in your case). Once that is installed and working, apply the patch to 6.2.3.X using FMC/FDM.

Hope this helps,
Matt.

Re: ASA-5500 install SFR module Help (111 Code failure)

Kgrevemberg — Tue, 27 Nov 2018 20:55:27 GMT

I believe I am doing that. The files I have downloaded are from the major release (6.2.3) page (https://software.cisco.com/download/home/286271172/type/286277393/release/6.2.3)

I downloaded the two bottom files.

Re: ASA-5500 install SFR module Help (111 Code failure)

matty-boy — Tue, 27 Nov 2018 21:04:34 GMT

My apologies, I did not read your post very well!

You mention you have setup a TFTP server, the the install requires FTP. Try setting up Filezilla server and trying again.

Re: ASA-5500 install SFR module Help (111 Code failure)

Kgrevemberg — Tue, 27 Nov 2018 21:10:05 GMT

Ok, thanks for the recommendation.

I have filezilla on one pc but have never used it. I will have to figure out how to set it up.

Re: ASA-5500 install SFR module Help (111 Code failure)

Abheesh Kumar — Tue, 27 Nov 2018 21:14:26 GMT

Hi,
Connect your Management interface and use FTP with below syntax.
system install ftp://username:password@XX.XX.XX.XX/asasfr-sys-6.2.3-83.pkg

HTH
Abheesh

Re: ASA-5500 install SFR module Help (111 Code failure)

matty-boy — Tue, 27 Nov 2018 21:15:50 GMT

It's not too tricky to get up and running. You'll need to create a user, add a password and point that user's home directory to wherever your .pkg file lives. Let us know how you get on.

Re: ASA-5500 install SFR module Help (111 Code failure)

Kgrevemberg — Tue, 27 Nov 2018 22:07:59 GMT

So far that seems to have been the hold up. Running the filezilla server was easy with a little google-fu.

The file has downloaded to the Sourcefire module and is now extracting. which is further than I got before.

Thanks for the help.

(Edit)

When it was donw extracting it now says "unknown Error Occured" Upgrade Aborted.

Any ideas?

Re: ASA-5500 install SFR module Help (111 Code failure)

matty-boy — Tue, 27 Nov 2018 22:08:04 GMT

Excellent! Glad to hear you’re on track now.

Re: ASA-5500 install SFR module Help (111 Code failure)

Kgrevemberg — Tue, 27 Nov 2018 22:11:51 GMT

Please read above post 🙂

Re: ASA-5500 install SFR module Help (111 Code failure)

matty-boy — Tue, 27 Nov 2018 22:18:49 GMT

**bleep**. I'm running out of ideas now. Did you see in Filezilla that the file was downloading? If no, might be username/password issue on Filezilla. Or Windows Firewall needs disabling? If yes....

Did the ASA download and then extract the image? Maybe it's corrupted? Check the md5 hash of the file and compare to the published has on Cisco.

Re: ASA-5500 install SFR module Help (111 Code failure)

Abheesh Kumar — Wed, 28 Nov 2018 08:21:24 GMT

Hi,

Did you see the below verifying, downloading extracting commands when you download the file via FTP.

system install ftp://username:password@XX.XX.XX.XX/asasfr-sys-6.2.3-83.pkg

Verifying
Downloading
Extracting

If you got error after this then your file may be corrupted. Download the file from cisco software central again and verify the MD5 value of the file you downloaded and then try to upload that in ASA SFR module.

HTH

Abheesh

Re: ASA-5500 install SFR module Help (111 Code failure)

Kgrevemberg — Wed, 28 Nov 2018 13:56:19 GMT

Yes it made it all the way then errored. I will try to download the file again. Thanks

Re: ASA-5500 install SFR module Help (111 Code failure)

Kgrevemberg — Wed, 28 Nov 2018 16:21:34 GMT

Looks like it is Erroring still.

Curious question, is it normal for the transfer to take 2 seconds? I see the SFR connect to filezilla in the log then initiat the transfer of the 1.3g file. It takes about 2 seconds to complete the transfer and disconnect. That seems extremely fast.

Re: ASA-5500 install SFR module Help (111 Code failure)

Kgrevemberg — Wed, 28 Nov 2018 16:25:19 GMT

I've redownloaded the file from cisco.

Looks like it is Erroring still.

It verifies, downloads then extracts but uppon completion of the extract it says unknown error occured.

Re: ASA-5500 install SFR module Help (111 Code failure)

matty-boy — Wed, 28 Nov 2018 16:36:26 GMT

That sounds far too quick.

Does FileZilla say that the FTP connection was successful and that the file was downloaded?

Maybe a screenshot of the FZ log window would help. This has tripped me up before. Double check username, password and home directory versus what you type in the sfr command line.

Re: ASA-5500 install SFR module Help (111 Code failure)

Kgrevemberg — Wed, 28 Nov 2018 17:15:21 GMT

Here is a screenshot of the session.

it says 2.6g transferred. Cut that in half as it is the sum of 2 transfers.

Re: ASA-5500 install SFR module Help (111 Code failure)

Kgrevemberg — Fri, 30 Nov 2018 13:33:49 GMT

Bump

Re: ASA-5500 install SFR module Help (111 Code failure)

Abheesh Kumar — Fri, 30 Nov 2018 16:58:52 GMT

Are you still facing issue.
>> Please test the FTP is accessible and are able to download the file from a different PC. If this is working and able to download the file then your FTP/PC is wronging properly.
>> Connect you laptop to the ASA management port and assign the IP from same range of IP of the SFR and try to copy the file. (before that verify the MD5 of file.)

HTH

Abheesh

Re: ASA-5500 install SFR module Help (111 Code failure)

Kgrevemberg — Fri, 30 Nov 2018 18:48:22 GMT

Well, once I unplugged from my network earlier and came back, suddenly filezilla cannot connect to localhost server.

I'm using the filezilla server version.

My ship seems to be sinking at this point lol