topic Re: ASA can't boot from system image in Network Security

ASA can't boot from system image

AyoubC — Tue, 12 Mar 2019 09:16:33 GMT

Hello Cisco experts,

I bought a used ASA 5510 two months ago for my lab gear, it was working super fine, but two days ago i turned on my ASA to work with and i found my self on the ROMMON, i know that it's tooo weird but even me i can't understand how come,

any way, moved to resolve the issue, i successfully uploaded asa724.bin via tftp then boot from, but the climax here is when i try to manually reboot, ASA asks if i need enter to ROMMON mode, otherwise keep looping trying to find the boot image.

So to work with ASA, i'm supposed to upload and image and keep the ASA ON, because simply if i reboot it i'll will need to re-upload image again,

NOTE: after uploading image and boot with, i noticed that my old running configuation is safe.

bellow some output commands:

ASA-LAB# show configuration
: Saved
: Written by enable_15 at 01:51:33.183 UTC Wed Jan 1 2003
!
ASA Version 7.2(4)
!
hostname ASA-LAB
enable password 8Ry2YjIyt7RRXU24 encrypted
passwd 2KFQnbNIdI.2KYOU encrypted
names
!
interface Ethernet0/0
nameif inside
security-level 100
ip address 10.0.0.2 255.0.0.0
!
interface Ethernet0/1
shutdown
no nameif
no security-level
no ip address
!
interface Ethernet0/2
shutdown
no nameif
no security-level
no ip address
!
interface Ethernet0/3
shutdown
no nameif
no security-level
no ip address
!
interface Management0/0
shutdown
no nameif
no security-level
no ip address
!
boot system disk0:/asa724-k8.bin
ftp mode passive
pager lines 24
mtu inside 1500
icmp unreachable rate-limit 1 burst-size 1
asdm image disk0:/asdm-722.bin
no asdm history enable
arp timeout 14400
route inside 0.0.0.0 0.0.0.0 10.0.0.1 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
telnet timeout 5
ssh timeout 5
console timeout 0
!
!
prompt hostname context
Cryptochecksum:f562c587ddf9575acfe1457da0f7e487

ASA-LAB# show version

Cisco Adaptive Security Appliance Software Version 7.2(4)

Compiled on Sun 06-Apr-08 13:39 by builders
System image file is "tftp://10.0.0.1/asa724-k8.bin"
Config file at boot was "startup-config"

ASA-LAB up 26 mins 37 secs

Hardware: ASA5510, 1024 MB RAM, CPU Pentium 4 Celeron 1600 MHz
Internal ATA Compact Flash, 256MB
BIOS Flash M50FW080 @ 0xffe00000, 1024KB

Encryption hardware device : Cisco ASA-55x0 on-board accelerator (revision 0x0)
Boot microcode : CNlite-MC-Boot-Cisco-1.2
SSL/IKE microcode: CNlite-MC-IPSEC-Admin-3.03
IPSec microcode : CNlite-MC-IPSECm-MAIN-2.05
0: Ext: Ethernet0/0 : address is 0022.90c1.fcce, irq 9
1: Ext: Ethernet0/1 : address is 0022.90c1.fccf, irq 9
2: Ext: Ethernet0/2 : address is 0022.90c1.fcd0, irq 9
3: Ext: Ethernet0/3 : address is 0022.90c1.fcd1, irq 9
4: Ext: Management0/0 : address is 0022.90c1.fcd2, irq 11
5: Int: Not used : irq 11
6: Int: Not used : irq 5
The Running Activation Key is not valid, using default settings:

Licensed features for this platform:
Maximum Physical Interfaces : Unlimited
Maximum VLANs : 50
Inside Hosts : Unlimited
Failover : Disabled
VPN-DES : Enabled
VPN-3DES-AES : Disabled
Security Contexts : 0
GTP/GPRS : Disabled
VPN Peers : 250
WebVPN Peers : 2

This platform has a Base license.

Serial Number: JMX1248L17S
Running Activation Key: 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000
Configuration register is 0x1
Configuration last modified by enable_15 at 01:51:28.524 UTC Wed Jan 1 2003
ASA-LAB#

ASA-LAB# dir

Directory of disk0:/

7 -rw- 16459776 08:22:10 Jan 01 2003 asa822-k8.bin
8 drw- 0 00:45:00 Jan 01 2003 crypto_archive
9 -rw- 8515584 01:16:18 Jan 01 2003 asa724-k8.bin

255426560 bytes total (230383616 bytes free)
ASA-LAB# show dis
ASA-LAB# show disk0
-#- --length-- -----date/time------ path
7 16459776 Jan 01 2003 08:22:10 asa822-k8.bin
8 0 Jan 01 2003 00:45:00 crypto_archive
9 8515584 Jan 01 2003 01:16:18 asa724-k8.bin

230383616 bytes available (25042944 bytes used)

ASA-LAB# show flash:
-#- --length-- -----date/time------ path
7 16459776 Jan 01 2003 08:22:10 asa822-k8.bin
8 0 Jan 01 2003 00:45:00 crypto_archive
9 8515584 Jan 01 2003 01:16:18 asa724-k8.bin

230383616 bytes available (25042944 bytes used)

Chabrouk,

Dennis Mink — Wed, 26 Apr 2017 12:00:43 GMT

Chabrouk,

the fact that you can still get your startup config from flash makes me think there is nothing wrong with the integrity if the flashcard itself. but rather with the image itself. Have you tried deleting it and load it back onto the flash card?

after this force it to boot from flash:

hostname(config)# boot config {disk0:/ | disk1:/}[path/]filename

Please rate if useful

hello dennis, appreciate your

AyoubC — Wed, 26 Apr 2017 15:18:25 GMT

hello dennis, appreciate your feedback,

what do you mean about "load it back onto Flashcard" ? you mean load it onto Disk0:/ ?

about booting from flash, don't know what i should put on cmd

ASA-LAB(config)# boot config
ASA-LAB(config)# boot config flas
ASA-LAB(config)# boot config flash:?

configure mode commands/options:
flash:/asa724-k8.bin flash:/asa822-k8.bin flash:/crypto_archive
ASA-LAB(config)# boot config flash:

Waiting for your feedback and also from other memeber,

Thanks for collaboration

hi,

johnlloyd_13 — Fri, 28 Apr 2017 03:37:52 GMT

hi,

did you check for errors on flash using the fsck disk0: command?

try to format flash using the format disk0: command.

Re: ASA can't boot from system image

AyoubC — Sun, 10 Sep 2017 11:17:08 GMT

issue resolved by hasard 😃

i have had an external Flash Memory Card 64Mo pluged on my ASA, i removed it and reload, ASA was successfuly booting and run it IOS without any problem

the external Flash card was faulty

Re: ASA can't boot from system image

Beparrwah — Sat, 07 Dec 2024 13:15:43 GMT

Hi All,

I am getting similar issue. Need help much appriciated. What I did

rommon #0> erase all

Erase storage media, valid <arg> for this platform:
disk0: - erase this device
disk1: - erase this device
all - erase all devices listed above

I think it deleted the image

now I am trying to reset or boot an image

rommon #4> boot
Launching BootLoader...
Default configuration file contains 1 entry.
Boot mode is 2. Default entry is 1.
Boot mode overrides default entry.
Error: Unable to select entry 2.
The only valid entry is:
1: default
The boot mode is stored in bits 3, 2 and 1 in the confreg.
Use ROMMON's "confreg" command to set the boot mode to a valid entry.
Default configuration file contains 1 entry.

Searching / for images to boot.

No images in /
Error 15: File not found

unable to boot an image

Failsafe booting engaged.
Default configuration file contains 1 entry.

Searching / for images to boot.

No images in /
Error 15: File not found

unable to boot an image

▒

Booting system, please wait...

CISCO SYSTEMS
Embedded BIOS Version 1.0(11)2 01/25/06 13:21:26.17

Low Memory: 631 KB
High Memory: 256 MB
PCI Device Table.
Bus Dev Func VendID DevID Class Irq
00 00 00 8086 2578 Host Bridge
00 01 00 8086 2579 PCI-to-PCI Bridge
00 03 00 8086 257B PCI-to-PCI Bridge
00 1C 00 8086 25AE PCI-to-PCI Bridge
00 1D 00 8086 25A9 Serial Bus 11
00 1D 01 8086 25AA Serial Bus 10
00 1D 04 8086 25AB System
00 1D 05 8086 25AC IRQ Controller
00 1D 07 8086 25AD Serial Bus 9
00 1E 00 8086 244E PCI-to-PCI Bridge
00 1F 00 8086 25A1 ISA Bridge
00 1F 02 8086 25A3 IDE Controller 11
00 1F 03 8086 25A4 Serial Bus 5
00 1F 05 8086 25A6 Audio 5
02 01 00 8086 1075 Ethernet 11
03 01 00 177D 0003 Encrypt/Decrypt 9
03 02 00 8086 1079 Ethernet 9
03 02 01 8086 1079 Ethernet 9
03 03 00 8086 1079 Ethernet 9
03 03 01 8086 1079 Ethernet 9
04 02 00 8086 1209 Ethernet 11
04 03 00 8086 1209 Ethernet 5

Evaluating BIOS Options ...
Launch BIOS Extension to setup ROMMON

Cisco Systems ROMMON Version (1.0(11)2) #0: Thu Jan 26 10:43:08 PST 2006

Platform ASA5510-K8
Management0/0
Ethernet auto negotiation timed out.
Interface-4 Link Not Established (check cable).

Default Interface number-4 Not Up

Use ? for help.
rommon #0>