topic Re: My ASA 5506-X stopped working in Network Security

My ASA 5506-X stopped working

AmmarHermiz14196 — Fri, 05 Nov 2021 20:41:56 GMT

Hi,

My ASA 5506-X stopped working. I am getting below and keep repeating itself on and on Please help !!!

Thanks, Ammar

Cisco Systems ROMMON, Version 1.1.13, RELEASE SOFTWARE
Copyright (c) 1994-2017 by Cisco Systems, Inc.
Compiled Mon 10/16/2017 17:54:58.29 by wchen64

Current image running: Boot ROM0

Last reset cause: LocalSoft
DIMM Slot 0 : Present

Platform ASA5506 with 4096 Mbytes of main memory
MAC Address: a0:93:51:f3:09:bf

Use BREAK or ESC to interrupt boot.
Use SPACE to begin boot immediately.

media drive disk0: not present
Attempt autoboot: "boot disk0:"
media drive disk0: not present
boot: cannot determine first file name on device "disk0:"
autoboot: All boot attempts have failed.
autoboot: Restarting the system.

Re: My ASA 5506-X stopped working

johnlloyd_13 — Sat, 06 Nov 2021 02:30:09 GMT

hi,

it seem the flash/disk0 went faulty. you'll need to raise a TAC case if it's still under warranty.

you can go to ROMMON mode and temporarily boot from USB/disk1 or remote TFTP server (just connect a PC).

Re: My ASA 5506-X stopped working

balaji.bandi — Sat, 06 Nov 2021 08:49:09 GMT

Do you have backup of config ?

If this production, quick fix boot from TFTP.

After this step :

Use BREAK or ESC to interrupt boot.
Use SPACE to begin boot immediately.

ROMMON > fsck flash:

You try booting from TFTP and erase flash and copy the image, if that not work raise an TAC if you have contract

Re: My ASA 5506-X stopped working

AmmarHermiz14196 — Sat, 06 Nov 2021 13:43:04 GMT

Hi,

Thank you for the help. It didn’t work.
I don’t have contract and also it is not under the warranty.

Thanks Ammar

Re: My ASA 5506-X stopped working

AmmarHermiz14196 — Sat, 06 Nov 2021 13:44:49 GMT

Hi,

Thank you for the help. It didn’t work.
I don’t have contract and also it is not under the warranty.

Re: My ASA 5506-X stopped working

Marius Gunnerud — Sat, 06 Nov 2021 19:16:43 GMT

If you do not understand what is required to boot from a TFTP server, then just say that and you will get help. Booting from a TFTP server has nothing to do with the device being on contract or under warranty. You do however need an image of ASA you can boot from.

Re: My ASA 5506-X stopped working

AmmarHermiz14196 — Sat, 06 Nov 2021 21:02:56 GMT

Please I am all ears. I don’t have knowledge about this. Friend of friend of mine configured it for me. I can’t reach him anymore. If you can walk me through it. But please you have to tell me step by step and I am highly appreciated.

Ammar

Re: My ASA 5506-X stopped working

AmmarHermiz14196 — Sat, 06 Nov 2021 21:48:18 GMT

Now I am getting this and by answering YES it doesn't working either. After it says Restarting the system. nothing happening, repeating the same thing

Cisco Systems ROMMON, Version 1.1.13, RELEASE SOFTWARE
Copyright (c) 1994-2017 by Cisco Systems, Inc.
Compiled Mon 10/16/2017 17:54:58.29 by wchen64

Current image running: Boot ROM0
Last reset cause: LocalSoft
DIMM Slot 0 : Present

Platform ASA5506 with 4096 Mbytes of main memory
MAC Address: a0:93:51:f3:09:bf

INFO: PASSWORD RECOVERY functionality is disabled.
Use BREAK or ESC to interrupt boot.
Use SPACE to begin boot immediately.
Boot interrupted.

WARNING: Password recovery and ROMMON command line access has been
disabled by your security policy. Answering YES below will cause ALL
configurations, passwords, images in 'disk0:' to be erased.
ROMMON command line access will be re-enabled, and a new image must be
downloaded via ROMMON.

Permanently erase 'disk0:'? Yes
Password recovery: The media drive disk0: is not present
media drive disk0: not present
Attempt autoboot: "boot disk0:"
media drive disk0: not present
boot: cannot determine first file name on device "disk0:"
autoboot: All boot attempts have failed.
autoboot: Restarting the system.

Re: My ASA 5506-X stopped working

balaji.bandi — Sat, 06 Nov 2021 21:53:11 GMT

here are the steps : ( but you should have Image of ASA to boot, if not you need to google and get the ASA Image to boot. - that is basic step before you move any further)

5506X do have USB port so you can boot from USB too.

https://www.cisco.com/c/en/us/td/docs/security/asa/asa98/configuration/general/asa-98-general-config/admin-swconfig.html#ID-2152-000008e5

Troubleshoot flash :

https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/113266-asa-flash-error-ts.html

Re: My ASA 5506-X stopped working

AmmarHermiz14196 — Sat, 06 Nov 2021 22:55:42 GMT

Thank you! but I can't access to Rommon

I am getting below

Current image running: Boot ROM0
Last reset cause: LocalSoft
DIMM Slot 0 : Present

Platform ASA5506 with 4096 Mbytes of main memory
MAC Address: a0:93:51:f3:09:bf

INFO: PASSWORD RECOVERY functionality is disabled.
Use BREAK or ESC to interrupt boot.
Use SPACE to begin boot immediately.
Boot interrupted.

Permanently erase 'disk0:'? Yes
Password recovery: The media drive disk0: is not present
media drive disk0: not present
Attempt autoboot: "boot disk0:"
media drive disk0: not present
boot: cannot determine first file name on device "disk0:"
autoboot: All boot attempts have failed.
autoboot: Restarting the system.

Re: My ASA 5506-X stopped working

AmmarHermiz14196 — Sat, 06 Nov 2021 23:09:59 GMT

sorry I accidentally hit the accept as solution.

Can you please get to my computer and see yourself what is going on ?

Re: My ASA 5506-X stopped working

balaji.bandi — Sun, 07 Nov 2021 06:19:32 GMT

I am Afraid we can do that, contact Local any network, and security consultant to do the job for you.

I personally do like this, if I am going to maintain this FW, you need to understand the process and be able to fix rather than rely on someone.

Re: My ASA 5506-X stopped working

AmmarHermiz14196 — Sun, 07 Nov 2021 12:12:48 GMT

Thank you Balaji,

Appreciate your help

Re: My ASA 5506-X stopped working

AmmarHermiz14196 — Sun, 07 Nov 2021 21:16:19 GMT

Hi,

Where I can download the ASA 5506-x Image?

I dont have contract with Cisco FYI.

Thanks,

Ammar

Re: My ASA 5506-X stopped working

balaji.bandi — Sun, 07 Nov 2021 21:32:09 GMT

If you do not have a contract you will be not able to download it, ask any Local cisco partner to help you to provide the image.

or if you know the exact name, google.com may help you. but that does not give you License.

Re: My ASA 5506-X stopped working

AmmarHermiz14196 — Sun, 07 Nov 2021 21:44:37 GMT

I was able to to get the TFTP set up but I don't have the image.

anyway it is what it is.

Thank you very much

Re: My ASA 5506-X stopped working

AmmarHermiz14196 — Sun, 07 Nov 2021 22:30:54 GMT

Hi Balaji,

I was able to find the file asa961-smp-k9.bin but i am sure doing something wrong which is it cut off . please see below

I am sure missing something?

rommon 53 > tftp
ADDRESS: 10.0.0.3
NETMASK: 255.0.0.0
GATEWAY: 10.0.0.5
SERVER: 10.0.0.5
IMAGE: asa961-smp-k8.bin
MACADDR: a0:93:51:f3:09:bf
VERBOSITY: Progress
RETRY: 40
PKTTIMEOUT: 7200
BLKSIZE: 1460
CHECKSUM: Yes
PORT: GbE/1
PHYMODE: Auto Detect
........................
ARP: address resolution for 10.0.0.5 timed out.
ARP failed with failure code 1. TFTP transfer aborted.

TFTP: Operation terminated prematurely.
rommon 54 >

Re: My ASA 5506-X stopped working

balaji.bandi — Mon, 08 Nov 2021 12:20:14 GMT

Do you have TFTP Server and connected where ? (is this running on your PC or Laptop, which is connected to ASA ?

Device has USB right, if you have difficult to TFTP, why not use USB., Copy the image(.bin File) to USB and boot from USB.

Re: My ASA 5506-X stopped working

AmmarHermiz14196 — Mon, 08 Nov 2021 16:56:22 GMT

Hi Balaji,

I was able to get it configured the ASA. but won't keep the configurations as soon I turn it off or reboot it wipe everything, I start from zero which is doing the tftp through Rommon upload the image ( This one is "asa9-14-8-lfbff-k8.SPA" I downloaded online from Google).

It was the main problem before is won't hold the configurations.

Is it something to do with the battery CR2025 need to be replaced or it is nothing to do with it??

Re: My ASA 5506-X stopped working

balaji.bandi — Mon, 08 Nov 2021 17:21:25 GMT

Ok that is good process (not sure is that version good or not, i dont trust some time the images available on internet, but it works)

Once you boot, did you format the flash and copy to flash ?

or you still booting from USB and trying to save the config ?

can you post

show version

dir

show run boot