topic Re: ASA rommon mode question in Network Security

ASA rommon mode question

matthewatt — Fri, 16 Oct 2020 15:09:21 GMT

If I have a firewall with no code on it and boot it into rommon mode, can I pull a code off a USB drive, or can I only do it by setting up TFTP parameters and then copying it down from TFTP server? thank you

Re: ASA rommon mode question

balaji.bandi — Fri, 16 Oct 2020 15:12:32 GMT

You can do both the ways, simple is USB, again depends on model you have.

if you have USB its easy, TFTP you need to setup one - but again what ever comfort level.

Re: ASA rommon mode question

matthewatt — Fri, 16 Oct 2020 15:22:35 GMT

thanks for reply. forgot to state, the firewall is a 5515. not sure what you meant by "TFTP you need to setup one". Can I pull a code directly off a USB drive from rommon mode, or am I forced to use TFTP? can you point me to the steps to pull a code off a USB stick from rommon mode?

Re: ASA rommon mode question

balaji.bandi — Fri, 16 Oct 2020 16:20:19 GMT

yes you can use USB and copy from ROMMON.

if want to use TFTP Follow below guide : ( i mean was you need to have TFTP running on your Laptop and image need to copied in to root folder).

https://www.networkstraining.com/using-the-rommon-to-load-a-new-image-on-cisco-asa-firewall/

Re: ASA rommon mode question

johnlloyd_13 — Sat, 17 Oct 2020 11:36:59 GMT

hi,

cisco device is a bit choosy when it comes to usb stick (it needs to be FAT formatted).

you can initially boot to an image on a usb drive/disk1: and then copy the image to flash/disk0:

see helpful link:

http://ccnpsecuritywannabe.blogspot.com/2015/06/asa-file-system-and-bootvar-command.html