FPR 1010 Error while Upgrading

SouthernNetwork — Mon, 29 Jan 2024 15:27:21 GMT

We are currently replacing our ASA with a Firepower 1010. When configuring the VPN we ran into an issue using a 3rd party certificate when trying to authorize SAML SSO with Azure. TAC suggested we update from 7.2 to 7.3. When updating the device we get roughly 35% complete until we hit failure and rollback with the error:

Network objects used in static route can't have the same IP as the IP of the interface used in the route...

The working ASA static route was:

route outside 0.0.0.0 0.0.0.0 10.12.140.1 1
route inside 10.0.0.0 255.0.0.0 10.12.141.1 1
route inside 10.50.128.0 255.255.128.0 10.12.141.1 1
route inside 172.16.0.0 255.240.0.0 10.12.141.1 1
route inside 192.168.0.0 255.255.0.0 10.12.141.1 1

The currently configured static route on the FPR is:

S* 0.0.0.0 0.0.0.0 [1/0] via 10.12.140.1, outside
S 10.0.0.0 255.0.0.0 [1/0] via 10.12.141.1, inside
C 10.12.140.0 255.255.255.0 is directly connected, outside
L 10.12.140.150 255.255.255.255 is directly connected, outside
C 10.12.141.0 255.255.255.0 is directly connected, inside
L 10.12.141.3 255.255.255.255 is directly connected, inside
S 10.50.128.0 255.255.128.0 [1/0] via 10.12.141.1, inside
S 172.16.0.0 255.240.0.0 [1/0] via 10.12.141.1, inside
S 192.168.0.0 255.255.0.0 [1/0] via 10.12.141.1, inside

We have a NAT pointing to 10.12.140.150 (Eth1/1 outside interface).

Eth1/2 (our inside interface) holds 10.12.141.3 and hands out addresses to active VPN connections within its /24 subnet.

I would appreciate any suggestions. (Really hoping I don't have to assign the outside interface a different IP because it involves waiting for our educational ISP to configure the NAT).

-Andrew

Re: FPR 1010 Error while Upgrading

Mark Elsen — Mon, 29 Jan 2024 15:40:53 GMT

- FYI : https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwd90846

Re: FPR 1010 Error while Upgrading

Aref Alsouqi — Mon, 29 Jan 2024 16:51:53 GMT

"Network objects used in static route can't have the same IP as the IP of the interface used in the route..."

Is that the error you get when you try to upgrade?

topic Re: FPR 1010 Error while Upgrading in Network Security

FPR 1010 Error while Upgrading

Re: FPR 1010 Error while Upgrading

Re: FPR 1010 Error while Upgrading