topic Re: ASA - unable to boot -- need urgent help in Network Security

ASA - unable to boot -- need urgent help

sarat1317 — Mon, 11 Mar 2019 09:11:59 GMT

I have erased the startup config and reloaded ASA 5510. Now its not able to boot preoperly

Launching BootLoader...

Default configuration file contains 1 entry.

Searching / for images to boot.

Error 28: Selected item cannot fit into memory

unable to boot an image

It seems the image file is not found. I cant use dir command on rommon mode to check if the image is on there.

can someone please advise on this ASAP? And if I want to upload the image, do I require additional access to download the image?

thanks

sarat

Re: ASA - unable to boot -- need urgent help

m-haddad — Thu, 21 Dec 2006 17:26:36 GMT

Hello,

Below you can find a link to upload new image. You need the ASA image and TFTP server.

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a00804708d8.shtml

Once you upgrade reload and let me know if everything works fine,

Appreciate your rating,

Regards,

Re: ASA - unable to boot -- need urgent help

sarat1317 — Thu, 21 Dec 2006 17:34:47 GMT

Thanks very much for the reply. I dont have permissions to download the image. Is there anyway I can download it?

Thank you

Re: ASA - unable to boot -- need urgent help

m-haddad — Thu, 21 Dec 2006 17:37:35 GMT

If you have a smartnet contract you can contact the vendor who sold you the ASA and ask for the image. This image is available to resellers and those who has CCO accounts with smartnet contracts. Smartnet contract is support contract that allows you to download latest versions of software and get support from Cisco when needed for hardware and software problems.

Let me know if you need anything further,

Thanks for the rate,

Regards,

Re: ASA - unable to boot -- need urgent help

sarat1317 — Thu, 21 Dec 2006 18:46:39 GMT

The document mentions about the monitor mode, is it the same as rommon mode?

I gave an IP to e0/1 interface on ASA connected to my workstation which acting as tftp server with another ip. And GW is assigned on ASA. However I cant ping the my workstation from ASA unit.

Am I doing something wrong in here.

Thanks

Sarat

Re: ASA - unable to boot -- need urgent help

m-haddad — Thu, 21 Dec 2006 19:37:14 GMT

Hello,

Yes it is the same as rommon. Make sure that your laptop is connected to the right interface. Another note is to connect your latop to the interface before you configure TFTP.

Therefore, I prefer if you reload your ASA while your laptop is connected then start the tftp configuration.

Let me know if this solves your problem,

Regards,

Re: ASA - unable to boot -- need urgent help

sarat1317 — Thu, 21 Dec 2006 20:11:04 GMT

No luck on this. Does xmodem works on ASA? If so, can you please send me a link for the procedure.

Thanks

Re: ASA - unable to boot -- need urgent help

sarat1317 — Thu, 21 Dec 2006 21:43:57 GMT

I think this is working now..I have to reload and see

Re: ASA - unable to boot -- need urgent help

m-haddad — Thu, 21 Dec 2006 22:23:55 GMT

Hello Sarat,

When you wanmtr to erase the configuration on in NVRAM you just issue the command "write erase". This will erase the startup config.

To see what is on the asa disk0 you issue the command "dir" only.

I feel that your config is pointing the ASA to boot from a wrong location. I suggest you do the below steps:

1- Upload again the ASA Image

1.5- issue the command "dir" to make sure the image is present

2- erase the start-up config using the command "write erase"

3- reload and make sure that the ASA boots normally

If it boots normally then check you configuration for any line that start with "boot system " If you have this line just remove it from the configuration because it seems it is pointing the ASA to boot from invalid location.

THen paste the configuration and reload.

Let me know how it goes,

Regards,

Re: ASA - unable to boot -- need urgent help

sarat1317 — Thu, 21 Dec 2006 22:49:04 GMT

Thanks for that. I know this is going to be simple but I am missing something.

When I upgrade the image and it boots to the config, however I see in show version as System image file is "tftp://10.10.30.13/asa702-k8.bin"

As I know I have to say copy tftp flash after the upgrade, when I mention

Address or name of remote host [10.10.30.13]? 10.10.30.13

Source filename [asa702-k8.bin]? asa702-k8.bin

Destination filename [asa702-k8.bin]?

Accessing tftp://10.10.30.13/asa702-k8.bin...

%Error opening tftp://10.10.30.13/asa702-k8.bin (No such device)

My image file is on c:/tftp-root folder on 10.10.30.13. I also tried giving the path to tftp-root, but still same issue

pl advise

thanks

sarat

Re: ASA - unable to boot -- need urgent help

m-haddad — Thu, 21 Dec 2006 23:04:50 GMT

Can you try this please.

When you upload the Image choose destination file name as: disk0:/asa702-k8.bin

Also, after the ASA boots:

conf t

boot system disk0:/asa702-k8.bin

Let me know if this solves the problem,

I suspecting your disk0 is not working. Try "dir" after you upload your image to see if the disk0 is reading correctly.

Re: ASA - unable to boot -- need urgent help

sarat1317 — Thu, 21 Dec 2006 23:10:22 GMT

ciscoasa# copy tftp flash

Address or name of remote host

Source filename [asa702-k8.bin]?

Destination filename [asa702-k8.bin]? disk0:/asa702-k8.bin

ciscoasa# dir

Directory of disk0:/

No files in directory

62881792 bytes total (62853120 bytes free)

There are no files in any directories which may be obvious as copy tftp flash didnt work.

Interesting thing is I cant ping my tftp server now though its available and connected. I just no shut the interface and the interface is up now which tells me the server is still connected. however I cant ping it.

any clues

Re: ASA - unable to boot -- need urgent help

sarat1317 — Thu, 21 Dec 2006 23:19:33 GMT

Looks like its working now. I can tftp now, and checking if that completes! will update shortly

Re: ASA - unable to boot -- need urgent help

m-haddad — Fri, 22 Dec 2006 00:13:25 GMT

Try to upload the ASA image again after it boots and check if disk0 has anything.

Let me know what happens,

Regards,

Re: ASA - unable to boot -- need urgent help

sarat1317 — Fri, 22 Dec 2006 00:26:04 GMT

YES, finally its working now. Few things I did to get this sorted. Initially after the upgrade, I was unable to ping tftp server, did no shut on the port and no luck. I had to configure an ip address on 1 interface and create a default route to server GW. then I was able to ping the server and then copy the flash. I configured the boot variable and saved. Finally resolved.

Have you worked on vpn on ASA, if so can you please take a look at link below. I have the final testing tomorrow. Your help will be appreciated.

http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Security&topic=Firewalling&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.1ddd112c

Thanks for all your help & time

Re: ASA - unable to boot -- need urgent help

m-haddad — Fri, 22 Dec 2006 00:53:06 GMT

Good to know that finally. Yeah of course worked on VPNs. I will try to help you with the other problem.

Regards,

Re: ASA - unable to boot -- need urgent help

sarat1317 — Fri, 22 Dec 2006 02:13:48 GMT

----------------------------------------------------------------------------------------------------------------------------

To install/upgrade IOS on ASA, this is the procedure which I did. I am putting this together as it may help others.

1. Download TFTP software on PC - this act as a TFTP server.

2. Assign IP address / mask / GW to PC (y.y.y.2/255.255.255.0/y.y.y.1)

3. Console to ASA from PC

4. Connect E0/0 port on ASA to PC (straight through)

5. Reload ASA

6. Configure TFTP server

7. Use these commands on ASA as below

interface e0/0

address x.x.x.x (assigned to ASA interface)

server y.y.y.2 (assigned to tftp server)

file asa702-k8.bin

ping y.y.y.2 - Make sure you can ping the server from ASA

tftp

This will upload the file.

Copy tftp flash -- didnt work for me directly and I got a message file cannot be opened and I was not able to ping the server.

8. Make sure interface connected to PC is up/up. Name the interface (inside/outside) and assign an address. Add a default route to pointing to PC GW. Now should be able to ping the server.

int e0/0

nameif inside

ip address x.x.x.x 255.255.255.0

route inside 0 0 y.y.y.1

9. Copy tftp flash

server ip - y.y.y.y

source file name - asa702-k8.bin

dest file name - asa702-k8.bin

File will be copied.

10. boot system disk0:/asa702-k8.bin

11. wr mem

----------------------------------------------------------------------------------------------------------------------------