topic Missing Startup-config in Network Security

Missing Startup-config

AmmarHermiz14196 — Fri, 26 Nov 2021 23:58:06 GMT

Hi,

I have ASA 5506-X every time I reboot the firewall or power goes out I have to re-upload the image through TFTP. It wont save the configuration. After reloading the configuration and trying to WR I get below:

please help!!

ciscoasa(config)# wr
Building configuration...
Cryptochecksum: 38821f41 471bd396 f025a3e2 ea1231a6

%Error opening nvram:/startup-config (No such file or directory)
[OK]

I ran show version got below :

ciscoasa(config)# show version

Cisco Adaptive Security Appliance Software Version 9.14(2)8
SSP Operating System Version 2.8(1.144)

Compiled on Fri 29-Jan-21 18:43 GMT by builders
System image file is "tftp://10.0.0.1/asa9-14-2-8-lfbff-k8.SPA"
Config file at boot was "startup-config"

ciscoasa up 31 mins 0 secs

Hardware: ASA5506, 4096 MB RAM, CPU Atom C2000 series 1250 MHz, 1 CPU (4 cores)
BIOS Flash M25P64 @ 0xfed01000, 16384KB

Encryption hardware device : Cisco ASA Crypto on-board accelerator (revision 0x1)
Number of accelerators: 1

1: Ext: GigabitEthernet1/1 : address is a093.51f3.09c0, irq 255
2: Ext: GigabitEthernet1/2 : address is a093.51f3.09c1, irq 255
3: Ext: GigabitEthernet1/3 : address is a093.51f3.09c2, irq 255
4: Ext: GigabitEthernet1/4 : address is a093.51f3.09c3, irq 255
5: Ext: GigabitEthernet1/5 : address is a093.51f3.09c4, irq 255
6: Ext: GigabitEthernet1/6 : address is a093.51f3.09c5, irq 255
7: Ext: GigabitEthernet1/7 : address is a093.51f3.09c6, irq 255
8: Ext: GigabitEthernet1/8 : address is a093.51f3.09c7, irq 255
9: Int: Internal-Data1/1 : address is a093.51f3.09bf, irq 255
10: Int: Internal-Data1/2 : address is 0000.0001.0002, irq 0
11: Int: Internal-Control1/1 : address is 0000.0001.0001, irq 0
12: Int: Internal-Data1/3 : address is 0000.0001.0003, irq 0
13: Ext: Management1/1 : address is a093.51f3.09bf, irq 0
14: Int: Internal-Data1/4 : address is 0000.0100.0001, irq 0
The Running Activation Key is not valid, using default settings:
The Running Activation Key feature: 2 security contexts exceed the limit on the platform, reduced to 0 security contexts.

Licensed features for this platform:
Maximum Physical Interfaces : Unlimited perpetual
Maximum VLANs : 5 perpetual
Inside Hosts : Unlimited perpetual
Failover : Disabled perpetual
Encryption-DES : Enabled perpetual
Encryption-3DES-AES : Disabled perpetual
Carrier : Disabled perpetual
AnyConnect Premium Peers : 2 perpetual
AnyConnect Essentials : Disabled perpetual
Other VPN Peers : 10 perpetual
Total VPN Peers : 12 perpetual
AnyConnect for Mobile : Disabled perpetual
AnyConnect for Cisco VPN Phone : Disabled perpetual
Advanced Endpoint Assessment : Disabled perpetual
Shared License : Disabled perpetual
Total TLS Proxy Sessions : 2 perpetual
Botnet Traffic Filter : Disabled perpetual
Cluster : Disabled perpetual

This platform has a Base license.

Serial Number: JAD22250L66
Running Permanent Activation Key: 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000
Configuration register is 0x1
FPGA UPGRADE Version : 2.4
FPGA GOLDEN Version : unavailable
ROMMON Version : 1.1.13
WARNING: Platform FPGA version is older than minimum recommended image.
WARNING: Platform ROMMON version is older than minimum recommended image.
Image type : Release
Key Version : A
Configuration last modified by enable_15 at 22:53:53.779 UTC Fri Nov 26 2021

Re: Missing Startup-config

Leo Laohoo — Sat, 27 Nov 2021 01:17:28 GMT

@AmmarHermiz14196 wrote:

System image file is "tftp://10.0.0.1/asa9-14-2-8-lfbff-k8.SPA"

Maybe because someone has changed the boot variable string of the ASA.
Instead of reading the files from disk0: (default), someone instructed the ASA to go to the TFTP server.

Either the TFTP has a read/write exception or the TFTP server no longer exist. When trying to "save" the config, the ASA spits out the error message that it could not write the startup-config file in a TFTP server that it could not write to. And because the ASA cannot save the config, the ASA always boots up without any config.

Re: Missing Startup-config

AmmarHermiz14196 — Sat, 27 Nov 2021 02:18:05 GMT

Hi Leo,

What is the solution in this case ? can you please help me or guide me to the right solution.

Thanks,

Ammar

Re: Missing Startup-config

Leo Laohoo — Sat, 27 Nov 2021 02:33:18 GMT

Post the complete output to the command "sh bootvar".

Re: Missing Startup-config

balaji.bandi — Sat, 27 Nov 2021 06:24:51 GMT

May be try :copy running-config startup-config

still not working post dir output.

Re: Missing Startup-config

AmmarHermiz14196 — Sat, 27 Nov 2021 13:06:42 GMT

see below please what I got when I typed :

ciscoasa(config)# show bootvar

BOOT variable =
Current BOOT variable =
CONFIG_FILE variable =
Current CONFIG_FILE variable =
ciscoasa(config)#

Re: Missing Startup-config

AmmarHermiz14196 — Sat, 27 Nov 2021 13:08:41 GMT

Please see below :

ciscoasa(config)# copy running-config startup-config

Source filename [running-config]?
Cryptochecksum: 77f702d6 fdcc61b1 5d5c12de 4cf540aa

%Error opening nvram:/startup-config (No such file or directory)
ciscoasa(config)# dir

%Error opening disk0:/ (No such file or directory)
ciscoasa(config)#

Re: Missing Startup-config

Marius Gunnerud — Sat, 27 Nov 2021 20:13:29 GMT

Is this ASA in production? or is it your personal ASA? Did you get it from a Cisco partner company or from, for example, Ebay?

It sounds like either the flash is corrupt or missing.

Re: Missing Startup-config

AmmarHermiz14196 — Sat, 27 Nov 2021 21:57:03 GMT

Hi Marius,

This ASA for personal use. it's use for my home network. Bought it from Amazon in 2019.

Please there is any way to fix it?? ....... Right now working fine but as soon as power it off or reboot it I lose everything and I have to upload the image through Rommon mode/TFTP.

It has to be a way to correct this ?

Thanks,

Ammar

Re: Missing Startup-config

balaji.bandi — Sat, 27 Nov 2021 22:48:31 GMT

Lets do below steps ( before doing copy running config to TFTP server

https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/81884-asa5500-disk0-error.html

Re: Missing Startup-config

AmmarHermiz14196 — Sun, 28 Nov 2021 14:24:00 GMT

below is the result. Please let me know what i am doing wrong??

ciscoasa# format disk0:

Format operation may take a while. Continue? [confirm]

Format operation will destroy all data in "disk0:". Continue? [confirm]
Initializing partition - done!
Creating FAT32 filesystem
/dev/sdb1: No such file or directory
mkfs.fat 3.0.28 (2015-05-16)

System tables written to disk
mount: mount point /mnt/disk0 does not exist

Format of disk0 complete
WARNING: Restoring security context mode failed.
WARNING: Restoring cluster interface mode failed.
ciscoasa# copy tftp disk0:

Address or name of remote host []? 10.0.0.1

Source filename []? asa9-14-2-8-lfbff-k8.SPA

Destination filename [asa9-14-2-8-lfbff-k8.SPA]?

Accessing tftp://10.0.0.1/asa9-14-2-8-lfbff-k8.SPA...
%Error writing disk0:/asa9-14-2-8-lfbff-k8.SPA (Bad file descriptor)
ciscoasa#

Re: Missing Startup-config

balaji.bandi — Sun, 28 Nov 2021 17:13:21 GMT

You already have before length discuss the same, and we concluded device is faulty. why this comes as a new topic? ( os is this new device ?)

https://community.cisco.com/t5/network-security/my-asa-5506-x-stopped-working/m-p/4499652#M1084915

Re: Missing Startup-config

Marius Gunnerud — Tue, 30 Nov 2021 20:45:48 GMT

I suggest you go on ebay and buy an ASA flash drive there and install it in the ASA. As mentioned earlier, this is a hardware issue.

Re: Missing Startup-config

AmmarHermiz14196 — Mon, 27 Dec 2021 13:43:30 GMT

Hi Marius,

When are you saying an ASA flash drive? you meant buying whole ASA 5506? I searched for ASA flash drive on eBay didn't see a hardware like that on eBay? please advice

Thanks,

Ammar

Re: Missing Startup-config

Marius Gunnerud — Tue, 28 Dec 2021 00:25:14 GMT

A quick search on eBay and I found this.

This is an ASA flash drive.

If you decide to purchase this drive, or any other drive for that matter, on eBay do so at your own risk. I take no responsibility for any purchase gone bad, or if the drive is faulty.