Issues using SCP to ASA5525 Firewall from ASR-1001-X

RDrew — Fri, 11 Jun 2021 21:01:15 GMT

Hello,

I am hoping someone can help me out with this issue I have run into.
I am trying to get a new ASA device image onto my current ASA 5525 so I can upgrade it.

I downloaded the new image from Cisco the new image is " asa9-12-4-24-smp-k8.bin " and saved to my desktop of my PC Windows 10.

I have enabled the SCP server on my router ASR 1001-X by issuing the command

Router(config)#ip scp server enable

I then open up PowerShell on the computer that has the image downloaded and enter this command

PS C:\Users\<user>\Desktop> pscp -scp -P 22 asa9-12-4-24-smp-k8.bin <user>@<IP_of_Router>:asa9-12-4-24-smp-k8.bin

it copies the image to the Router with no errors being flagged.

I then go to my ASA FW 5528 running 12.4.2 and I make sure the scopy command is enabled by running the following command,

ASA(config)# ssh scopy enable

I then try to initiate the copy command to copy it from the Router to the FW by using this command

ASA# copy scp://<user>@<IP_of_Router>/asa9-12-4-24-smp-k8.bin asa9-12-4-24-smp-k8.bin

I then get the following error on the ASA

%Error Opening scp://<user>@<IP_of_Router>/asa9-12-4-24-smp-k8.bin asa9-12-4-24-smp-k8.bin (Permission Denied)

I have racked my brain and for the life of me cannot figure out . I have even tried to use PowerShell to pscp the image to the ASA but I get another error the image by all accounts looks like it transferred but at the end it says FATAL ERROR: received unexpected end-of-file from server

pscp -scp -P 22 asa9-12-4-24-smp-k8.bin <user>@<IP-of_ASA>:asa9-12-4-24-smp-k8.bin
<user>@<IP>'s password:
asa9-12-4-24-smp-k8.bin | 105066 kB | 5003.1 kB/s | ETA: 00:00:00 | 100%
FATAL ERROR: Received unexpected end-of-file from server

I am able to successfully get images to my other devices. a Cisco IOS-XE switch, NX-OS switch, and my ASR Router. it is just the ASA that is giving me trouble.

any help would be greatly appreciated.

Re: Issues using SCP to ASA5525 Firewall from ASR-1001-X

johnlloyd_13 — Sat, 12 Jun 2021 11:29:54 GMT

hi,

check the ASA flash/disk0 if it still has free space. issue a 'dir' and check the % free.

delete some old .bin image and ASDM to free up the flash.

Re: Issues using SCP to ASA5525 Firewall from ASR-1001-X

RDrew — Mon, 14 Jun 2021 11:23:16 GMT

Hello,

I have checked the Free space on disk0 and there is sufficient space on disk0 for the new image to go.

Re: Issues using SCP to ASA5525 Firewall from ASR-1001-X

RDrew — Fri, 18 Jun 2021 15:07:35 GMT

I finally figured it out. I used SCP to transfer the from the desktop over to the ASA event though I still got the Fatal Error at the end I checked the MD5 checksum and they matched 100%. So I ended up using that way to upgrade the FW to the new image.

topic Issues using SCP to ASA5525 Firewall from ASR-1001-X in Network Security

Issues using SCP to ASA5525 Firewall from ASR-1001-X

Re: Issues using SCP to ASA5525 Firewall from ASR-1001-X

Re: Issues using SCP to ASA5525 Firewall from ASR-1001-X

Re: Issues using SCP to ASA5525 Firewall from ASR-1001-X