topic Re: Firepower 2130 - Factory Reset in Network Security

Firepower 2130 - Factory Reset

Ozan1 — Fri, 20 Aug 2021 18:36:22 GMT

How do you go from appliance mode back to platform mode? We are trying to convert our Firepower 2100 to running FTD.

We've tried booting in rommon and applying factory-reset and boot, it goes back to loading the ASA in appliance mode.

These commands are not available in FXOS after the device is in Appliance Mode.

connect local-mgmt

erase configuration

Re: Firepower 2130 - Factory Reset

balaji.bandi — Fri, 20 Aug 2021 22:16:19 GMT

Firepower 2100 in Appliance Mode fails to boot into ASA, it will boot into FXOS failsafe mode. In this mode, FXOS allows minimal configuration to allow diagnosis and recovery of the system

follow below guide :

https://www.cisco.com/c/en/us/td/docs/security/asa/fxos/troubleshoot/asa-fxos-troubleshoot/system_recovery.html#id_119397

Re: Firepower 2130 - Factory Reset

Milos_Jovanovic — Sat, 21 Aug 2021 11:08:55 GMT

Hi @Ozan1,

If you want to convert your existing FPR2130 which is currently running ASA appliance mode, then you need to follow the this guide on reimaging ASA to FTD.

BR,

Milos

Re: Firepower 2130 - Factory Reset

Ilkin — Mon, 23 Aug 2021 21:32:56 GMT

In version 9.13+ FPR2100 reimage results in appliance mode. The correct way to convert to the platform mode is as follows:

1. Log in to the ASA in the appliance mode with the admin user and run "no fxos mode appliance".

2. write memory and reload.

After restart, this results in a default configuration in platform mode, i.e. all config is lost.

Re: Firepower 2130 - Factory Reset

Ozan1 — Mon, 23 Aug 2021 19:21:42 GMT

Thank you Ilkin. This worked. Do you recommend any books on FTD deployment? I bought Nazmul's Cisco Firepower Threat Defense book, but that is mainly showing deployment in various platforms and not the actual FTD policies, etc.

The CCNP 300-710 book is due in February 2022. Thanks again.

Re: Firepower 2130 - Factory Reset

Abhishek3010 — Tue, 18 Jun 2024 18:37:38 GMT

If you are using FPR2130 and running ASA on it and want to revet back to the FTD and having issues, Please follow the below steps:

NOTE: The FXOS mode is Appliance when running ASA image.

1. Connect to ASA CLI
2. Go to global configuration (config terminal)
3. run "no fxos mode appliance".
4. Wr Mem.
5. reload

After restart you will land on FXOS CLI with Platform Mode. Now you can follow beloe steps to erase the current configuration and set it to default FTD.

Follow these steps on FXOX CLI:

firepower-2130# scope firmware
firepower-2130 /firmware # scope auto-install
firepower-2130 /firmware/auto-install # ex
firepower-2130 /firmware # show package
Name Package-Vers
--------------------------------------------- ------------
cisco-asa-fp2k.9.18.4.29.SPA 7.9.4
cisco-asa-fp2k.9.8.2.SPA 9.8.2
cisco-ftd-fp2k.7.0.1-84.SPA 7.0.1-84

firepower-2130 /firmware # scope auto-install
firepower-2130 /firmware/ auto-install # install security-pack version 7.0.1-84

Then click Yes on next 2 Prompts and then,

Now the device will compile and restart it.