topic Re: CISCO sfr stuck in Network Security

CISCO sfr stuck

alkasibicts — Tue, 06 Aug 2024 13:53:15 GMT

Hello everyone,

While installing the sfr pkg file in Cisco ASA5506-X firewall its stuck at the middle on the process saying " vlan0 is not connected to host netowrk". I have no vlan configuration at all.

any sugestions.

Re: CISCO sfr stuck

ccieexpert — Wed, 07 Aug 2024 03:42:41 GMT

Please share the entire output.. That message seems to be a warning...

did you wait for a longer time to see if something was happening ?

Re: CISCO sfr stuck

alkasibicts — Sun, 11 Aug 2024 07:58:35 GMT

Hello and thank you for your reply.

Bellow is as i run system install, all ports.

asasfr-boot>system install noconfirm ftp://admin:admin@192.168.5.5/asasfr-sys-6.6.0-90.pkg
Mod-sfr 402> asasfr login: [ 1228.468430] vda: vda1
Mod-sfr 403> [ 1232.622722] Adding 4194756k swap on /dev/vda1. Priority:-1 extents:1 across:41
Mod-sfr 404> 94756k
Verifying
Downloading
Extracting
Package Detail
Description: Cisco ASA-SFR 6.6.0-90 System Install
Requires reboot: Yes

Warning: Please do not interrupt the process or turn off the system.
Doing so might leave system in unusable state.

Mod-sfr 405> [ 3374.912958] sda: unknown partition table
Upgrading
Starting upgrade process ...Mod-sfr 406> [ 3377.918947] sda: sda1 sda2

Populating new system imageMod-sfr 407> [ 3386.000995] kjournald starting. Commit interval 5 seconds
Mod-sfr 408> [ 3386.003793] EXT3-fs (sda2): using internal journal
Mod-sfr 409> [ 3386.006112] EXT3-fs (sda2): mounted filesystem with writeback data mode

Broadcast message from root (ttyS1) (Sun Aug 11 08:08:05 2024):

The system is going down for reboot NOW!
Mod-sfr 410> INIT: Switching to runlevel: 6
Mod-sfr 411> INIT: Sending processes the TERM signal
Mod-sfr 412> Stopping OpenBSD Secure Shell server: sshdstopped /usr/sbin/sshd (pid 2040)
Mod-sfr 413> .
Mod-sfr 414> Stopping Advanced Configuration and Power Interface daemon: no /usr/sbin/acpid fou
Mod-sfr 415> nd; none killed
Mod-sfr 416> stopping Busybox inetd: inetd... stopped inetd (pid 2048)
Mod-sfr 417> done.
Mod-sfr 418> Stopping ntpd: start-stop-daemon: warning: killing process 0: No such process
Mod-sfr 419> done
Mod-sfr 420> Stopping syslogd/klogd: done
Mod-sfr 421> Deconfiguring network interfaces... done.
Mod-sfr 422> Sending all processes the TERM signal...
Mod-sfr 423> Sending all processes the KILL signal...
Mod-sfr 424> Unmounting remote filesystems...
Mod-sfr 425> Deactivating swap...
Mod-sfr 426> Unmounting local filesystems...
Mod-sfr 427> umount2: Device or resource busy
Mod-sfr 428> umount: none busy - remounted read-only
Mod-sfr 429> Rebooting... [ 3500.491500] Unregister pv shared memory for cpu 0
Mod-sfr 430> [ 3500.491505] Unregister pv shared memory for cpu 2
Mod-sfr 431> [ 3500.495959] Unregister pv shared memory for cpu 1
Mod-sfr 432> [ 3500.498606] sd 0:0:0:0: [sda] Synchronizing SCSI cache
Mod-sfr 433> [ 3500.503225] Restarting system.
Mod-sfr 434> [ 3500.504692] reboot: machine restart
Mod-sfr 435> ***
Mod-sfr 436> *** EVENT: The module is being automatically restarted.
Mod-sfr 437> *** TIME: 08:08:16 UTC Aug 11 2024
Mod-sfr 438> ***
Mod-sfr 439> ***
Mod-sfr 440> *** EVENT: Start Parameters: Image: /mnt/disk0/vm/vm_1.img, ISO: , Num CPUs: 3, RA
Mod-sfr 441> M: 2251MB, Mgmt MAC: 74:88:BB:CA:5D:9E, CP MAC: 00:00:00:02:00:01, HDD: -drive fil
Mod-sfr 442> e=/dev/sda,cache=none,if=virtio, Dev Driver: virtio
Mod-sfr 443> *** TIME: 08:08:16 UTC Aug 11 202
Mod-sfr 444> ***
Mod-sfr 445> *** EVENT: Start Parameters Continued: RegEx Shared Mem: 0MB, Cmd Op: , Shared Mem
Mod-sfr 446> Key: 8061, Shared Mem Size: 16, Log Pipe: /dev/ttyS0_vm1, Sock: /dev/ttyS1_vm1, M
Mod-sfr 447> em-Path: -mem-path /hugepages
Mod-sfr 448> *** TIME: 08:08:16 UTC Aug 11 2024
Mod-sfr 449> ***
Mod-sfr 450> Status: Mapping host 0x2aab38000000 to VM with size 16777216
Mod-sfr 451> Warning: vlan 0 is not connected to host network

Re: CISCO sfr stuck

alkasibicts — Sun, 11 Aug 2024 08:00:34 GMT

Hello,

Bellow is sfr settings

Welcome to Cisco FirePOWER Services Setup
[hit Ctrl-C to abort]
Default values are inside []

Enter a hostname [asasfr]: mysfr
Do you want to configure IPv4 address on management interface?(y/n) [Y]: y
Do you want to enable DHCP for IPv4 address assignment on management interface?(y/n) [N]: n
Enter an IPv4 address [192.168.8.8]: 192.168.5.8
Enter the netmask [255.255.255.0]: 255.255.255.0
Enter the gateway [192.168.8.1]: 192.168.5.6
Do you want to configure static IPv6 address on management interface?(y/n) [N]: n
Stateless autoconfiguration will be enabled for IPv6 addresses.
Enter the primary DNS server IP address: 8.8.8.8
Do you want to configure Secondary DNS Server? (y/n) [n]: n
Do you want to configure Local Domain Name? (y/n) [n]: n
Do you want to configure Search domains? (y/n) [n]: n
Do you want to enable the NTP service? [Y]: n

Please review the final configuration:
Hostname: mysfr
Management Interface Configuration

IPv4 Configuration: static
IP Address: 192.168.5.8
Netmask: 255.255.255.0
Gateway: 192.168.5.6

IPv6 Configuration: Stateless autoconfiguration

DNS Configuration:
DNS Server:
8.8.8.8

NTP configuration: Disabled

CAUTION:
You have selected IPv6 stateless autoconfiguration, which assigns a global address
based on network prefix and a device identifier. Although this address is unlikely
to change, if it does change, the system will stop functioning correctly.
We suggest you use static addressing instead.

Apply the changes?(y,n) [Y]: Y
Configuration saved successfully!
Applying...
Restarting network services...

Re: CISCO sfr stuck

Mark Elsen — Sun, 11 Aug 2024 09:54:51 GMT

>....Mod-sfr 451> Warning: vlan 0 is not connected to host network
- This could mean that the ASA is missing a network connection somewhere and or check if all intended connections
are 'working' and solid

+ You can also connect to the ASA with https://cway.cisco.com/cli/ then connect to the ASA with it
at the top right or left you will have button called 'System Diagnostics'

Re: CISCO sfr stuck

alkasibicts — Sun, 11 Aug 2024 10:35:20 GMT

Thank you for your reply, My settings are all pinging from all ends and is according to CISCO manual accurateley. I will try https://cway.cisco.com/cli/.

And will update.