topic Re: Module sfr did not respond to session request. in Network Security

Module sfr did not respond to session request.

seckka21 — Tue, 27 Jul 2021 12:35:01 GMT

Hello

I have an ASA 5525-X versio 9.8 and i am trying to install firepower module 6.2.2 but i am still having this error.

Module sfr did not respond to session request.

Here you are the show version and another command.

Re: Module sfr did not respond to session request.

seckka21 — Tue, 27 Jul 2021 12:36:42 GMT

Re: Module sfr did not respond to session request.

balaji.bandi — Tue, 27 Jul 2021 12:59:52 GMT

I am sure it should be compatable : Look at the matrix :

https://www.cisco.com/c/en/us/td/docs/security/asa/compatibility/asamatrx.html

Mod Status Data Plane Status Compatibility
---- ------------------ --------------------- -------------
sfr Recover Not Applicable

Follow below guide :

https://www.petenetlive.com/KB/Article/0001164

Re: Module sfr did not respond to session request.

seckka21 — Tue, 27 Jul 2021 13:09:24 GMT

according to the matrix ASA 9.8 and Firepower 6.2.2 are compatible.i have this error when i am reimaging after the commande sw-module module sfr recover boot.

Re: Module sfr did not respond to session request.

seckka21 — Wed, 28 Jul 2021 08:30:42 GMT

Hello

I have no solution please can you look for me i am a beginner with firepower

Re: Module sfr did not respond to session request.

balaji.bandi — Wed, 28 Jul 2021 09:31:15 GMT

Connect the console and do the proceedure as per the document mentioned, and post complete output.

Re: Module sfr did not respond to session request.

seckka21 — Wed, 28 Jul 2021 09:48:18 GMT

i am using a usb to copy the image on the ASA 5525-X with that command

copy disk1:/asasfr-5500x-boot-6.2.2-3 disk0: and the copy passed.I very on the disk0 and i see the the image.my question is that will the image asasfr-5500x-boot-6.3.0-3.img be compatible with ASA 9.8 on ASA model 5525-x?

in the matrix they said that 6.2.2 firepower version is compatible with ASA 9.8.

ciscoasa# sw-module module ips shutdown
ciscoasa# sw-module module ips uninstall
ciscoasa# reload
ciscoasa# sw-module module sfr shutdown
ciscoasa# sw-module module sfr uninstall
copy disk1:/asasfr-5500x-boot-6.2.2-3 disk0:
ciscoasa# sw-module module sfr recover configure image disk0:/asasfr-5500x-boot-6.2.2-3
ciscoasa# sw-module module sfr recover boot
the module is in recovery mode and no respond to session.
"Module sfr did not respond to session request"

Re: Module sfr did not respond to session request.

seckka21 — Wed, 28 Jul 2021 09:59:31 GMT

To give you more information:

ciscoasa(config)# show module sfr recover
Module sfr recover parameters...
Boot Recovery Image: Yes
Image File Path: disk0:/asasfr-5500x-boot-6.2.2-3.img

**********************************************************

Cisco Adaptive Security Appliance Software Version 9.8(2)
Firepower Extensible Operating System Version 2.2(2.52)
Device Manager Version 7.8(2)

********************************

ciscoasa(config)# SHOw module sfr details
Getting details from the Service Module, please wait...
Unable to read details from module sfr

Card Type: Unknown
Model: N/A
Hardware version: N/A
Serial Number: FCH2314741E
Firmware version: N/A
Software version:
MAC Address Range: 2c4f.520a.7052 to 2c4f.520a.7052
Data Plane Status: Not Applicable
Console session: Ready
Status: Recover

************************************************

ciscoasa(config)# show inventory
Name: "Chassis", DESCR: "ASA 5525-X with SW, 8 GE Data, 1 GE Mgmt, AC"
PID: ASA5525 , VID: V06 , SN: FTX2320W0BM

Name: "Storage Device 1", DESCR: "Model Number: Micron_1100_MTFDDAK128TBN"
PID: N/A , VID: N/A , SN: MSA22010ZHL

**********************************************

ciscoasa(config)# session sfr
Opening command session with module sfr.
Module sfr did not respond to session request.

Re: Module sfr did not respond to session request.

balaji.bandi — Wed, 28 Jul 2021 14:21:11 GMT

copy disk1:/asasfr-5500x-boot-6.2.2-3 disk0: and the copy passed.I very on the disk0 and i see the the image.my question is that will the image asasfr-5500x-boot-6.3.0-3.img be compatible with ASA 9.8 on ASA model 5525-x

6.3 is compatable.

i am wondering, the copy command really copying file ?

copy disk1:/asasfr-5500x-boot-6.2.2-3.img disk0:/asasfr-5500x-boot-6.2.2-3.img

Once this copied, can you post output :

#dir disk0:

as mentioned in the document before installing worth shutdown and uninstall.

in case like to refer any commands:

https://www.cisco.com/c/en/us/support/docs/security/asa-firepower-services/118644-configure-firepower-00.html?referring_site=RE&pos=1&page=https://www.cisco.com/c/en/us/support/security/asa-5525-x-firepower-services/model.html

Re: Module sfr did not respond to session request.

seckka21 — Wed, 28 Jul 2021 14:24:29 GMT

ciscoasa# dir disk0:

Directory of disk0:/

11 drwx 4096 07:50:50 May 16 2019 log
23 drwx 4096 07:50:52 May 16 2019 crypto_archive
24 drwx 4096 07:50:56 May 16 2019 coredumpinfo
137 -rwx 108822528 10:57:36 Jul 27 2021 asa982-smp-k8.bin
138 -rwx 26970456 07:57:50 May 16 2019 asdm-782.bin
254 -rwx 41848832 14:18:03 Jul 28 2021 asasfr-5500x-boot-6.2.2-3.img
140 -rwx 33699 12:43:26 Jul 27 2021 fr_csd.po
141 -rwx 2686 12:43:28 Jul 27 2021 fr_customization.po
142 -rwx 4149 12:43:28 Jul 27 2021 fr_PortForwarder.po
143 -rwx 34638 12:43:28 Jul 27 2021 fr_webvpn.po
144 -rwx 35150 12:43:28 Jul 27 2021 ja_csd.po
145 -rwx 2927 12:43:28 Jul 27 2021 ja_customization.po
146 -rwx 4481 12:43:30 Jul 27 2021 ja_PortForwarder.po
147 -rwx 36989 12:43:30 Jul 27 2021 ja_webvpn.po
148 -rwx 3101 12:43:30 Jul 27 2021 ru_customization.po
149 -rwx 4932 12:43:30 Jul 27 2021 ru_PortForwarder.po
150 -rwx 42083 12:43:30 Jul 27 2021 ru_webvpn.po
151 -rwx 24679 12:43:34 Jul 27 2021 startup-config-new.cfg
152 -rwx 4096 11:19:16 Jul 14 2021 FSCK0000.REC
153 -rwx 0 11:19:16 Jul 14 2021 FSCK0001.REC
154 -rwx 0 11:19:16 Jul 14 2021 FSCK0002.REC
155 -rwx 0 11:19:16 Jul 14 2021 FSCK0003.REC
<--- More --->

Re: Module sfr did not respond to session request.

seckka21 — Wed, 28 Jul 2021 14:32:40 GMT

the show module sfr details output show that session is ready but when i try to execute session sfr console the session crashes and i am no longer to open console session until i restart the ASA.

Re: Module sfr did not respond to session request.

balaji.bandi — Thu, 29 Jul 2021 09:49:37 GMT

Appologies for the delay -

I am sure we missing some steps here, we need to do step by step by approach before we get in to next step.

Please confirm, did you try any other version 6.3.X before you move to 6.2.2 - there are some issues around (but not encountered by me).

Connect the console - start capture the logs :

#sw-module module sfr uninstall
#debug module-boot <---- this will help you to identify the issue what going wrong.
#sw-module module sfr recover configure image disk0:asasfr-5500x-boot-6.2.2-3.img
#sw-module module sfr recover boot

#session sfr console

Good vidoe :

https://www.youtube.com/watch?v=GWKqHIFMato

Re: Module sfr did not respond to session request.

seckka21 — Thu, 29 Jul 2021 10:37:33 GMT

Hello

I haven't try 6.3.X because i am not sure if it is compatible with ASA version 9.8 for the model 5525-X.

Re: Module sfr did not respond to session request.

balaji.bandi — Thu, 29 Jul 2021 11:24:39 GMT

just checking, follow the instructions, and enable debug (so we can know what is the error or post errors)

let us know when you have the information to understand the issue.

Re: Module sfr did not respond to session request.

seckka21 — Thu, 29 Jul 2021 11:29:06 GMT

ciscoasa# show module sfr log console

Displaying Console Log Information for Module sfr:

***
*** EVENT: Start Parameters Continued: RegEx Shared Mem: 32MB, Cmd Op: , Shared Mem Key: 8061, Shared Mem Size: 64, Log Pipe: /dev/ttyS0_vm3, Sock: /dev/ttyS1_vm3, Mem-Path: -mem-path /hugepages
*** TIME: 13:08:28 UTC Jul 28 2021
***
Status: Mapping host 0x2aab78600000 to VM with size 67108864
Warning: vlan 0 is not connected to host network

***
*** EVENT: Killing the Module.
*** TIME: 13:11:02 UTC Jul 28 2021
***

***
*** EVENT: Start Parameters: Image: /mnt/disk0/vm/vm_3.img, ISO: , Num CPUs: 3, RAM: 3281MB, Mgmt MAC: 2C:4F:52:0A:70:52, CP MAC: 00:00:00:04:00:01, HDD: -drive file=/dev/md0,cache=none,if=virtio, Dev Driver: virtio
*** TIME: 13:11:07 UTC Jul 28 202
<--- More --->
<--- More ---> ***
<--- More ---> *** EVENT: Start Parameters Continued: RegEx Shared Mem: 32MB, Cmd Op: , Shared Mem Key: 8061, Shared Mem Size: 64, Log Pipe: /dev/ttyS0_vm3, Sock: /dev/ttyS1_vm3, Mem-Path: -mem-path /hugepages
<--- More ---> *** TIME: 13:11:07 UTC Jul 28 2021
<--- More ---> ***
<--- More ---> Status: Mapping host 0x2aab78600000 to VM with size 67108864
<--- More ---> Warning: vlan 0 is not connected to host network
<--- More --->
<--- More --->
<--- More ---> ***
<--- More ---> *** EVENT: Killing the Module.
<--- More ---> *** TIME: 13:19:08 UTC Jul 28 2021
<--- More ---> ***
<--- More --->
<--- More --->
<--- More ---> ***
<--- More ---> *** EVENT: The module is being recovered.
<--- More ---> *** TIME: 13:19:08 UTC Jul 28 2021
<--- More ---> ***
<--- More --->
<--- More --->
<--- More ---> ***
<--- More ---> *** EVENT: Creating the Disk Image...
<--- More ---> *** TIME: 13:19:13 UTC Jul 28 2021
<--- More ---> ***
<--- More --->
<--- More --->
<--- More ---> ***
<--- More ---> *** EVENT: Disk Image created successfully.
<--- More ---> *** TIME: 13:21:39 UTC Jul 28 2021
<--- More ---> ***
<--- More --->
<--- More --->
<--- More ---> ***
<--- More ---> *** EVENT: Start Parameters: Image: /mnt/disk0/vm/vm_3.img, ISO: -cdrom /mnt/disk0/asasfr-5500x-boot-6.2.2-3.img, Num CPUs: 3, RAM: 3281MB, Mgmt MAC: 2C:4F:52:0A:70:52, CP MAC: 00:00:00:04:00:01, HDD: -drive file=/dev/md0,cache=none,if=virtio, Dev D
<--- More --->
<--- More ---> ***
<--- More ---> *** EVENT: Start Parameters Continued: RegEx Shared Mem: 32MB, Cmd Op: r, Shared Mem Key: 8061, Shared Mem Size: 64, Log Pipe: /dev/ttyS0_vm3, Sock: /dev/ttyS1_vm3, Mem-Path: -mem-path /hugepages
<--- More ---> *** TIME: 13:21:39 UTC Jul 28 2021
<--- More ---> ***
<--- More ---> Status: Mapping host 0x2aab78600000 to VM with size 67108864
<--- More ---> Warning: vlan 0 is not connected to host network
<--- More --->
<--- More --->
ciscoasa#

Re: Module sfr did not respond to session request.

balaji.bandi — Thu, 29 Jul 2021 12:29:56 GMT

Logs i can see was yesterday one.

<--- More ---> Status: Mapping host 0x2aab78600000 to VM with size 67108864
<--- More ---> Warning: vlan 0 is not connected to host network

what happends after this message ?

If you looking to resolve the issue, please do follow the steps as guided earlier do make all Logs and post here. the video is well explained and documented.

( if you getting still same error it might have corrupted SSD - need to raise an TAC to RMA).

Re: Module sfr did not respond to session request.

seckka21 — Thu, 29 Jul 2021 13:09:50 GMT

Hello

when i use the ASA for the first time sfr 6.2.2 was installed but when i try to open a session console it always show System initialization in progress thatis why i uninstall the sfr module to reimage it.I have follow the documentation in cisco site.After executing the recover boot command i noticed there have been many line of log .But i have waited more than four hours and i can't open session.I decided to stop the recovery and restart the process .Since i began now i have few logs and the module behave the sames.I think the ssd has a problem.

Re: Module sfr did not respond to session request.

balaji.bandi — Thu, 29 Jul 2021 13:16:12 GMT

.I think the ssd has a problem.

if this is conclude need to raise an TAC for RMA and re-image.

Re: Module sfr did not respond to session request.

seckka21 — Mon, 02 Aug 2021 14:23:29 GMT

i have executed these commands before sw-module module sfr recover boot

i have more logs and the console always show this error below.

debug sfr error
debug sfr events
debug sfr messages
debug cplane
debug module-boot

cp_update_connection: Error updating connection_id 0
ciscoasa(config)#
cp_connect: Error - cp_connect() returned -1
cp_check_connection: handle -1, conflicts with connection 1 (-1)
cp_check_connection: handle -1, conflicts with connection 2 (-1)
cp_check_connection: handle -1, conflicts with connection 3 (-1)
cp_update_connection: Error updating connection_id 0
cp_connect: Error - cp_connect() returned -1
cp_check_connection: handle -1, conflicts with connection 1 (-1)
cp_check_connection: handle -1, conflicts with connection 2 (-1)
cp_check_connection: handle -1, conflicts with connection 3 (-1)
cp_update_connection: Error updating connection_id 0
cp_connect: Error - cp_connect() returned -1
cp_check_connection: handle -1, conflicts with connection 1 (-1)
cp_check_connection: handle -1, conflicts with connection 2 (-1)
cp_check_connection: handle -1, conflicts with connection 3 (-1)
cp_update_connection: Error updating connection_id 0
cp_connect: Error - cp_connect() returned -1
cp_check_connection: handle -1, conflicts with connection 1 (-1)
cp_check_connection: handle -1, conflicts with connection 2 (-1)
cp_check_connection: handle -1, conflicts with connection 3 (-1)
cp_update_connection: Error updating connection_id 0
cp_connect: Error - cp_connect() returned -1
cp_check_connection: handle -1, conflicts with connection 1 (-1)
cp_check_connection: handle -1, conflicts with connection 2 (-1)

Re: Module sfr did not respond to session request.

seckka21 — Wed, 04 Aug 2021 20:50:44 GMT

Finally i have a solution.

Instead of installing firepower version 6.2.2 i try 6.2.3 and it works .Thank you.