topic Re: ASA 5505 in Network Security

ASA 5505

pmudenda87 — Tue, 12 Mar 2019 11:21:58 GMT

Having challenges to reload my ASA 5505 which is stuck in rommon, Kindly assist if anyone has a solution here.

After loading it's freezing on the last lines in the script here attached.

rommon #0> ADDRESS=192.168.20.10
rommon #1> SERVER=192.168.20.1
rommon #2> GATEWAY=192.168.20.1
rommon #3> IMAGE=asa924-14-k8.bin
rommon #4> PORT=Ethernet0/0
Ethernet0/0
MAC Address: d0d0.fdcb.89c8
Link is UP
rommon #5> ping server
Sending 20, 100-byte ICMP Echoes to server 192.168.20.1, timeout is 4 seconds:
?!!!!!!!!!!!!!!!!!!!
Success rate is 95 percent (19/20)
rommon #6> SET
Invalid or incorrect command. Use 'help' for help.
rommon #6> set
ROMMON Variable Settings:
ADDRESS=192.168.20.10
SERVER=192.168.20.1
GATEWAY=192.168.20.1
PORT=Ethernet0/0
VLAN=untagged
IMAGE=asa924-14-k8.bin
CONFIG=
LINKTIMEOUT=20
PKTTIMEOUT=4
RETRY=20

rommon #7>

rommon #7> tftpdnld
ROMMON Variable Settings:
ADDRESS=192.168.20.10
SERVER=192.168.20.1
GATEWAY=192.168.20.1
PORT=Ethernet0/0
VLAN=untagged
IMAGE=asa924-14-k8.bin
CONFIG=
LINKTIMEOUT=20
PKTTIMEOUT=4
RETRY=20

tftp asa924-14-k8.bin@192.168.20.1 via 192.168.20.1
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

Received 30818304 bytes

Launching TFTP Image...

Cisco Security Appliance admin loader (3.0) #0: Thu Aug 18 15:01:25 PDT 2016

Loading...
IO memory blocks requested from bigphys 32bit: 10033
Àdosfsck 2.11, 12 Mar 2005, FAT32, LFN
Currently, only 1 or 2 FATs are supported, not 255.

dosfsck(/dev/hda1) returned 1
mount: mounting /dev/hda1 on /mnt/disk0 failed: Invalid argument
mount: mounting /dev/hda1 on /mnt/disk0 failed: Invalid argument

Processor memory 331350016, Reserved memory: 68157440

Total SSMs found: 0

Total NICs found: 10
88E6095 rev 2 Gigabit Ethernet @ index 09 MAC: 0000.0003.0002
88E6095 rev 2 Ethernet @ index 08 MAC: d0d0.fdcb.89c7
88E6095 rev 2 Ethernet @ index 07 MAC: d0d0.fdcb.89c6
88E6095 rev 2 Ethernet @ index 06 MAC: d0d0.fdcb.89c5
88E6095 rev 2 Ethernet @ index 05 MAC: d0d0.fdcb.89c4
88E6095 rev 2 Ethernet @ index 04 MAC: d0d0.fdcb.89c3
88E6095 rev 2 Ethernet @ index 03 MAC: d0d0.fdcb.89c2
88E6095 rev 2 Ethernet @ index 02 MAC: d0d0.fdcb.89c1
88E6095 rev 2 Ethernet @ index 01 MAC: d0d0.fdcb.89c0
y88acs06 rev16 Gigabit Ethernet @ index 00 MAC: d0d0.fdcb.89c8

INFO: Unable to read firewall mode from flash
Writing default firewall mode (single) to flash

INFO: Unable to read cluster interface-mode from flash
Writing default mode "None" to flash
Verify the activation-key, it might take a while...
Failed to retrieve permanent activation key.
Running Permanent Activation Key: 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000
The Running Activation Key is not valid, using default settings:

Licensed features for this platform:
Maximum Physical Interfaces : 8 perpetual
VLANs : 3 DMZ Restricted
Dual ISPs : Disabled perpetual
VLAN Trunk Ports : 0 perpetual
Inside Hosts : 10 perpetual
Failover : Disabled perpetual
Encryption-DES : Enabled perpetual
Encryption-3DES-AES : Disabled perpetual
AnyConnect Premium Peers : 2 perpetual
AnyConnect Essentials : Disabled perpetual
Other VPN Peers : 10 perpetual
Total VPN Peers : 12 perpetual
Shared License : Disabled perpetual
AnyConnect for Mobile : Disabled perpetual
AnyConnect for Cisco VPN Phone : Disabled perpetual
Advanced Endpoint Assessment : Disabled perpetual
UC Phone Proxy Sessions : 2 perpetual
Total UC Proxy Sessions : 2 perpetual
Botnet Traffic Filter : Disabled perpetual
Intercompany Media Engine : Disabled perpetual
Cluster : Disabled perpetual

This platform has a Base license.

Encryption hardware device : Cisco ASA-5505 on-board accelerator (revision 0x0)
Boot microcode : CN1000-MC-BOOT-2.00
SSL/IKE microcode : CNlite-MC-SSLm-PLUS-2.08
IPSec microcode : CNlite-MC-IPSECm-MAIN-2.09

i2c_write_byte_w_suspend() error, slot = 0x0, device = 0x40, address = 26 byte count = 1. Reason: I2C_UNPOPULATED_ERROR

Cisco Adaptive Security Appliance Software Version 9.2(4)14

****************************** Warning *******************************
This product contains cryptographic features and is
subject to United States and local country laws
governing, import, export, transfer, and use.
Delivery of Cisco cryptographic products does not
imply third-party authority to import, export,
distribute, or use encryption. Importers, exporters,
distributors and users are responsible for compliance
with U.S. and local country laws. By using this
product you agree to comply with applicable laws and
regulations. If you are unable to comply with U.S.
and local laws, return the enclosed items immediately.

A summary of U.S. laws governing Cisco cryptographic
products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by
sending email to export@cisco.com.
******************************* Warning *******************************

This product includes software developed by the OpenSSL Project
for use in the OpenSSL Toolkit (http://www.openssl.org/)
Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
All rights reserved.
Copyright (c) 1998-2011 The OpenSSL Project.
All rights reserved.

This product includes software developed at the University of
California, Irvine for use in the DAV Explorer project
(http://www.ics.uci.edu/~webdav/)
Copyright (c) 1999-2005 Regents of the University of California.
All rights reserved.

Busybox, version 1.16.1, Copyright (C) 1989, 1991 Free Software Foundation, Inc.
51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
Busybox comes with ABSOLUTELY NO WARRANTY.
This is free software, and you are welcome to redistribute it under the General
Public License v.2 (http://www.gnu.org/licenses/gpl-2.0.html)
See User Manual (''Licensing'') for details.

DOSFSTOOLS, version 2.11, Copyright (C) 1989, 1991 Free Software Foundation, Inc.
59 Temple Place, Suite 330, Boston, MA 02111-1307
675 Mass Ave, Cambridge, MA 02139
DOSFSTOOLS comes with ABSOLUTELY NO WARRANTY.
This is free software, and you are welcome to redistribute it under the General
Public License v.2 (http://www.gnu.org/licenses/gpl-2.0.html)
See User Manual (''Licensing'') for details.

grub, version 0.94, Copyright (C) 1989, 1991 Free Software Foundation, Inc.
59 Temple Place, Suite 330, Boston, MA 02111-1307
grub comes with ABSOLUTELY NO WARRANTY.
This is free software, and you are welcome to redistribute it under the General
Public License v.2 (http://www.gnu.org/licenses/gpl-2.0.html)
See User Manual (''Licensing'') for details.

libgcc, version 4.3, Copyright (C) 2007 Free Software Foundation, Inc.
libgcc comes with ABSOLUTELY NO WARRANTY.
This is free software, and you are welcome to redistribute it under the General
Public License v.2 (http://www.gnu.org/licenses/gpl-2.0.html)
See User Manual (''Licensing'') for details.

libstdc++, version 4.3, Copyright (C) 2007 Free Software Foundation, Inc.
libstdc++ comes with ABSOLUTELY NO WARRANTY.
This is free software, and you are welcome to redistribute it under the General
Public License v.2 (http://www.gnu.org/licenses/gpl-2.0.html)
See User Manual (''Licensing'') for details.

Linux kernel, version 2.6.29.6, Copyright (C) 1989, 1991 Free Software
Foundation, Inc.
51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
Linux kernel comes with ABSOLUTELY NO WARRANTY.
This is free software, and you are welcome to redistribute it under the General
Public License v.2 (http://www.gnu.org/licenses/gpl-2.0.html)
See User Manual (''Licensing'') for details.

module-init-tools, version 3.10, Copyright (C) 1989, 1991 Free Software
Foundation, Inc.
59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
module-init-tools comes with ABSOLUTELY NO WARRANTY.
This is free software, and you are welcome to redistribute it under the General
Public License v.2 (http://www.gnu.org/licenses/gpl-2.0.html)
See User Manual (''Licensing'') for details.

numactl, version 2.0.3, Copyright (C) 2008 SGI.
Author: Andi Kleen, SUSE Labs
Version 2.0.0 by Cliff Wickman, Chritopher Lameter and Lee Schermerhorn
numactl comes with ABSOLUTELY NO WARRANTY.
This is free software, and you are welcome to redistribute it under the General
Public License v.2 (http://www.gnu.org/licenses/gpl-2.0.html)
See User Manual (''Licensing'') for details.

pciutils, version 3.1.4, Copyright (C) 1989, 1991 Free Software Foundation, Inc.
51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
pciutils comes with ABSOLUTELY NO WARRANTY.
This is free software, and you are welcome to redistribute it under the General
Public License v.2 (http://www.gnu.org/licenses/gpl-2.0.html)
See User Manual (''Licensing'') for details.

readline, version 5.2, Copyright (C) 1989, 1991 Free Software Foundation, Inc.
59 Temple Place, Suite 330, Boston, MA 02111 USA
readline comes with ABSOLUTELY NO WARRANTY.
This is free software, and you are welcome to redistribute it under the General
Public License v.2 (http://www.gnu.org/licenses/gpl-2.0.html)
See User Manual (''Licensing'') for details.

udev, version 146, Copyright (C) 1989, 1991 Free Software Foundation, Inc.
51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
udev comes with ABSOLUTELY NO WARRANTY.
This is free software, and you are welcome to redistribute it under the General
Public License v.2 (http://www.gnu.org/licenses/gpl-2.0.html)
See User Manual (''Licensing'') for details.

util-linux, version 2.16.1, Copyright (C) 1989, 1991 Free Software Foundation, Inc.
The following components, built for inclusion in Busybox.
The following components from util-linux come with ABSOLUTELY NO WARRANTY.
fdisk:
Copyright (C) 1992 A. V. Le Blanc (LeBlanc@mcc.ac.uk)
Copyright (C) 2001,2002 Vladimir Oleynik <dzo@simtreas.ru> (initial bb port)
dmesg:
Copyright 2006 Rob Landley <rob@landley.net>
Copyright 2006 Bernhard Reutner-Fischer <rep.nop@aon.at>
mkswap:
Copyright 2006 Rob Landley <rob@landley.net>
mount:
Copyright (C) 1995, 1996 by Bruce Perens <bruce@pixar.com>.
Copyright (C) 1999-2004 by Erik Andersen <andersen@codepoet.org>
Copyright (C) 2005-2006 by Rob Landley <rob@landley.net>
umount:
Copyright (C) 1999-2004 by Erik Andersen <andersen@codepoet.org>
Copyright (C) 2005 by Rob Landley <rob@landley.net>
This is free software, and you are welcome to redistribute it under the General
Public License v.2 (http://www.gnu.org/licenses/gpl-2.0.html)
See User Manual (''Licensing'') for details.

Certain components of Cisco ASA Software are licensed under the GNU
Lesser Public License (LGPL) Version 2.1. The software code licensed under LGPL
Version 2.1 is free software that comes with ABSOLUTELY NO WARRANTY. You can
redistribute and/or modify such LGPL code under the terms of LGPL Version 2.1
(http://www.gnu.org/licenses/lgpl-2.1.html). See User Manual for licensing
details.

Restricted Rights Legend
Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.

Cisco Systems, Inc.
170 West Tasman Drive
San Jose, California 95134-1706

Re: ASA 5505

venkat_n7 — Fri, 15 Feb 2019 14:24:02 GMT

can you remove and re-insert the ram from firewall and boot itup. Please capture the info and post it.

Re: ASA 5505

pmudenda87 — Fri, 15 Feb 2019 15:05:16 GMT

Thanks for the response, it returned the same error.

Re: ASA 5505

johnd2310 — Fri, 15 Feb 2019 15:11:04 GMT

Hi,

Have you tried loading another image like asa917-32-k8.bin? How much RAM is in the ASA?

Thanks

John

Re: ASA 5505

venkat_n7 — Fri, 15 Feb 2019 15:16:31 GMT

empty the flash on firewall and recopy the below version.

try this version asa917-32-k8.bin image and see, how it goes...

Remember, 9.0x version code needs 512mb ram. the version i recommended was gold star by cisco.

Re: ASA 5505

pmudenda87 — Sat, 16 Feb 2019 07:04:16 GMT

Returned the same error, eventually freezes. I have 512 Ram on it and 128 Flash.

rommon #0>
rommon #0> ADDRESS=192.168.20.10
rommon #1> SERVER=192.168.20.1
rommon #2> GATEWAY=192.168.20.1
rommon #3> IMAGE=asa917-32-k8.bin
rommon #4> PORT=Ethernet0/0
Ethernet0/0
MAC Address: d0d0.fdcb.89c8
Link is UP
rommon #5> set
ROMMON Variable Settings:
ADDRESS=192.168.20.10
SERVER=192.168.20.1
GATEWAY=192.168.20.1
PORT=Ethernet0/0
VLAN=untagged
IMAGE=asa917-32-k8.bin
CONFIG=
LINKTIMEOUT=20
PKTTIMEOUT=4
RETRY=20

rommon #6> tftpdnld
ROMMON Variable Settings:
ADDRESS=192.168.20.10
SERVER=192.168.20.1
GATEWAY=192.168.20.1
PORT=Ethernet0/0
VLAN=untagged
IMAGE=asa917-32-k8.bin
CONFIG=
LINKTIMEOUT=20
PKTTIMEOUT=4
RETRY=20

tftp asa917-32-k8.bin@192.168.20.1 via 192.168.20.1
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

dosfsck(/dev/hda1) returned 1
mount: mounting /dev/hda1 on /mnt/disk0 failed: Invalid argument
mount: mounting /dev/hda1 on /mnt/disk0 failed: Invalid argument
Processor memory 331350016, Reserved memory: 68157440

Total SSMs found: 0

INFO: Unable to read firewall mode from flash
Writing default firewall mode (single) to flash

This platform has a Base license.

i2c_write_byte_w_suspend() error, slot = 0x0, device = 0x40, address = 26 byte count = 1. Reason: I2C_UNPOPULATED_ERROR

Cisco Adaptive Security Appliance Software Version 9.1(7)32

A summary of U.S. laws governing Cisco cryptographic
products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by
sending email to export@cisco.com.
******************************* Warning *******************************

numactl, version 2.0.3, Copyright (C) 2008 SGI.
Author: AnVersion 2.0.0 by Cliff Wickman, Chritopher Lameter and Lee Schermerhorn
numactl comes with ABSOLUTELY NO WARRANTY.
This is free software, and you are welcome to redistribute it under the General
Public License v.2 (http://www.gnu.org/licenses/gpl-2.0.html)
See User Manual (''Licensing'') for details.

Cisco Adapative Security Appliance Software, version 9.1,
Copyright (c) 1996-2018 by Cisco Systems, Inc.
Certain components of Cisco ASA Software, Version 9.1 are licensed under the GNU
Lesser Public License (LGPL) Version 2.1. The software code licensed under LGPL
Version 2.1 is free software that comes with ABSOLUTELY NO WARRANTY. You can
redistribute and/or modify such LGPL code under the terms of LGPL Version 2.1
(http://www.gnu.org/licenses/lgpl-2.1.html). See User Manual for licensing
details.

Restricted Rights Legend

Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.

Cisco Systems, Inc.
170 West Tasman Drive
San Jose, California 95134-1706

Re: ASA 5505

pmudenda87 — Sat, 16 Feb 2019 07:06:45 GMT

Maybe its the corrupt firmwares i dont know 26.784kb is the correct size for ASA917-32-K8.bin?

Re: ASA 5505

johnd2310 — Sun, 17 Feb 2019 09:55:40 GMT

Hi,

I think you have a hardware issue. Open a TAC case with Cisco and get the ASA replaced if you have SMARTNET for it.

Thanks

John