Cannot get my firepower module to communicate out

cylemmulo1 — Fri, 21 Feb 2020 16:13:45 GMT

So to begin, Cisco ASA i'm totally new with. One of our Fortigates is dying out though, and I had this unused so i'm attempting to install it as a learning process and replacement.

So I have a 5515-X. I had it setup easy enough as just a regular ASA but I got greedy and decided to try getting firepower to work.

I've gotten to where I do

Petes-ASA(config)# sw-module module sfr recover configure image disk0:/xxxxx

Petes-ASA(config)# sw-module module sfr recover boot

Did a setup with it being 172.16.81.1/24 and my laptop was set at .2 of the same subnet. But now I can't get the SFR to talk to anything. I try to ping each way and nothing. I am hooked into mgmt0/0 not g0/0 also.

Hostname: asasfr
Management Interface Configuration

IPv4 Configuration: static
IP Address: 172.16.81.1
Netmask: 255.255.255.0
Gateway: 172.16.81.2

IPv6 Configuration: Stateless autoconfiguration

DNS Configuration:
DNS Server:
172.16.81.2

NTP configuration: Disabled

asasfr-boot>show interfaces
eth0 Link encap:Ethernet HWaddr 84:3D:C6:76:E9:4B
inet addr: 172.16.81.1 Bcast:172.16.81.255 Mask:255.255.255.0
inet6 addr: fe80::863d:c6ff:fe76:e94b/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:42 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:8988 (8.7 KiB)

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.255.255.255
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)

I also tried setting up on the main console to connect g0/0 and M0/0 like one of cisco's guides shows, but those won't communicate either.

It seems fairly simple, is there a reason this interface wouldn't communicate?

Re: Cannot get my firepower module to communicate out

Marvin Rhoads — Wed, 12 Sep 2018 03:14:57 GMT

Can you share the output of

show module sfr detail

...from the ASA cli?

It looks like you're still at the boot prompt meaning you haven't completed installing the module. There is a boot package that you install first to bootstrap the module and then a full image with all the rest of the module.

Re: Cannot get my firepower module to communicate out

cylemmulo1 — Wed, 12 Sep 2018 12:41:57 GMT

Yes, sorry I'm still trying to get a handle on how to word everything, but you are correct it's at the boot before I install the package.

Re: Cannot get my firepower module to communicate out

Marvin Rhoads — Wed, 12 Sep 2018 16:18:50 GMT

Continue on to install the system package per the installation guide. While you're in that interim state you won't have a full set of networking functions.

topic Re: Cannot get my firepower module to communicate out in Network Security

Cannot get my firepower module to communicate out

Re: Cannot get my firepower module to communicate out

Re: Cannot get my firepower module to communicate out

Re: Cannot get my firepower module to communicate out