topic Re: ASAv reboots after every 1 hour in Network Security

ASAv reboots after every 1 hour

ganeshsukale — Thu, 20 Aug 2020 12:05:00 GMT

we have a ASAv installed in a single mode.

This ASA gets reboot after every one hour with below logs,

********************************************************************************

WARNING: ASAv platform license state is Unlicensed.
******** ASAv will reload in 30 seconds. ********

***
*** --- START GRACEFUL SHUTDOWN ---
***
*** Message to all terminals:
***
*** ASAv platform is unlicensed
Shutting down isakmp
Shutting down webvpn
Shutting down License Controller
Shutting down File system
Shutting down Azure Fabric Agent

***
*** --- SHUTDOWN NOW ---
***
*** Message to all terminals:
***
*** ASAv platform is unlicensed

******************************************************************************

Smart licensing config is as below,

profile License
destination address http https://10.XX.XX.XX/Transportgateway/services/DeviceRequestHandler
destination transport-method http

Can some one please help in to understand why ASAv is rebooting after every one hour.

Re: ASAv reboots after every 1 hour

balaji.bandi — Thu, 20 Aug 2020 12:11:44 GMT

is this for LAB or Live environment :

Do you have Licesne and enough resources - what is the versoin of ASAv

WARNING: ASAv platform license state is Unlicensed.

Re: ASAv reboots after every 1 hour

ganeshsukale — Thu, 20 Aug 2020 12:21:52 GMT

Hi Balaji,

Thanks for your quick reply. This ASAv is in production network.

System image file is "(hd0,1)/asa9-12-3-12-smp-k8.bin"

License mode: Smart Licensing
ASAv Platform License State: Licensed
Active entitlement: ASAv-STD-100M, enforce mode: Authorized
Licensed for maximum of 1 vCPU
Installed license is insufficient for the instance type deployed. Performance is reduced with the currently installed license.

Above is the extract from show version output.

Post reboot it shows status as licensed. Resources are also fine on HyperV.

Re: ASAv reboots after every 1 hour

balaji.bandi — Thu, 20 Aug 2020 12:43:11 GMT

I have seen in my test lab other version while i am doing some PoC, suggested to increate RAM, see any Logging enabled which causing to crash.

4GB suggested or if you have more raise to 8GB and try.

check the requirment as below : (never tried hyper-v (VMWARE works fine with 4GB and above)

https://www.cisco.com/c/en/us/td/docs/security/asa/asa912/asav/quick-start-book/asav-912-qsg/asav_intro.html

Re: ASAv reboots after every 1 hour

jimholla — Thu, 20 Aug 2020 12:57:33 GMT

ASAv100 (16core) is only supported with software release 9.14.1.6 or higher. It looks like you are running software version 9.12.3.12 which does not support 16core VMs.

Re: ASAv reboots after every 1 hour

ganeshsukale — Thu, 20 Aug 2020 13:07:22 GMT

Hi Jim

below is sh version output, i have highlighted the HW part. i believe its ASAv30 and resource allotted is 1CPU with 4 cores.

AZU-WEU-FW-01# sh version

Cisco Adaptive Security Appliance Software Version 9.12(3)12
SSP Operating System Version 2.6(1.198)
Device Manager Version 7.13(1)

Compiled on Fri 17-Apr-20 10:50 PDT by builders
System image file is "(hd0,1)/asa9-12-3-12-smp-k8.bin"
Config file at boot was "startup-config"

AZU-WEU-FW-01 up 28 mins 9 secs

Hardware: ASAv, 14336 MB RAM, CPU Xeon E5 series 2400 MHz, 1 CPU (4 cores)
Model Id: ASAv30
Internal ATA Compact Flash, 9216MB
Slot 1: ATA Compact Flash, 9216MB
BIOS Flash Firmware Hub @ 0x0, 0KB

0: Ext: Management0/0 : address is 000d.3a47.38dc, irq 0
1: Ext: GigabitEthernet0/0 : address is 000d.3a47.38f1, irq 0
2: Ext: GigabitEthernet0/1 : address is 000d.3a47.35cc, irq 0
3: Ext: GigabitEthernet0/2 : address is 000d.3a47.360a, irq 0

Licensed features for this platform:
Maximum VLANs : 200
Inside Hosts : Unlimited
Failover : Active/Standby
Encryption-DES : Enabled
Encryption-3DES-AES : Enabled
Security Contexts : 0
Carrier : Enabled
AnyConnect Premium Peers : 50
AnyConnect Essentials : Disabled
Other VPN Peers : 750
Total VPN Peers : 750
AnyConnect for Mobile : Enabled
AnyConnect for Cisco VPN Phone : Enabled
Advanced Endpoint Assessment : Enabled
Shared License : Disabled
Total TLS Proxy Sessions : 500
Botnet Traffic Filter : Enabled
Cluster : Disabled

Serial Number: XXXXXXXXX

Image type : Release
Key version : A

Configuration last modified by enable_1 at 14:19:53.189 CEST Thu Aug 20 2020

Re: ASAv reboots after every 1 hour

balaji.bandi — Thu, 20 Aug 2020 13:40:20 GMT

But as per the version it show as "Active entitlement: ASAv-STD-100M"

Re: ASAv reboots after every 1 hour

jimholla — Thu, 20 Aug 2020 14:18:22 GMT

Sorry, I mistakenly thought you were using the new ASAv100 license.

Is it possible for you to upgrade to software version 9.13.1 or later? In that release we made it so that you can run any license on any sized VM (#vCPUs, amount of memory). If that is not possible then for the 9.12 release, if you want to run an ASAv-STD-100M license then you can only run on a VM with 1 vCPU and a maximum of 2GB of memory.

Re: ASAv reboots after every 1 hour

alpha.nscglobal — Fri, 21 Aug 2020 10:01:35 GMT

Hi Jim,

Thanks for the reply. When the issue started the ASAv was on 9.12.1 and we upgrade to 9.12.3 to mitigate this. This was unsuccessful and the reboots still persist. This configuration worked for us since a year with no issues found. I would try to upgrade to 9.13.1 or higher release and check.