topic Hello Aditya, in Network Security

ASA 5555-X with SW - error messages - cmgr_kvm_sw_mod_idp_req_thread, Failed

nilambhate — Tue, 12 Mar 2019 07:44:18 GMT

CMGR PLAT: In sw_mod_idprom_resp_handler Failed to find idp resp PID for slot 1

CMGR VM: In cmgr_kvm_sw_mod_idp_req_thread, Failed to retrieve IDPROM data from software module 1

This problem has rendered 3 of our ASA5555x out of service.

Please help

thanks

Nilam

Hi,

Aditya Ganjoo — Thu, 12 May 2016 00:10:17 GMT

Hi,

Are you using IPS module on the ASA ?

Can you share the show module of the ASA ?

Also check this bug and see if it matches your issue:

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCul58230/?reffering_site=dumpcr

Regards,

Aditya

Please rate helpful posts and mark correct answers.

Hello Aditya,

nilambhate — Fri, 13 May 2016 14:12:30 GMT

Hello Aditya,

below is the Show Module output

ciscoasa# show module

Mod Card Type                                    Model              Serial No.
---- -------------------------------------------- ------------------ -----------
   0 ASA 5555-X with SW, 8 GE Data, 1 GE Mgmt     ASA5555            FCH16307KEU
ips Unknown                                      N/A                FCH16307KEU
cxsc Unknown                                      N/A                FCH16307KEU

Mod MAC Address Range                 Hw Version   Fw Version   Sw Version
---- --------------------------------- ------------ ------------ ---------------
   0 30f7.0d47.cb8a to 30f7.0d47.cb93 1.0          2.1(9)8      9.1(2)
ips 30f7.0d47.cb88 to 30f7.0d47.cb88 N/A          N/A
cxsc 30f7.0d47.cb88 to 30f7.0d47.cb88 N/A          N/A

Mod SSM Application Name Status SSM Application Version
---- ------------------------------ ---------------- --------------------------
cxsc Unknown No Image Present Not Applicable

Mod Status             Data Plane Status     Compatibility
---- ------------------ --------------------- -------------
   0 Up Sys             Not Applicable
ips Init               Not Applicable
cxsc Unresponsive       Not Applicable

Mod License Name License Status Time Remaining
---- -------------- --------------- ---------------
ips IPS Module Enabled perpetual

As you can see from the above output, it does look similar

please advise further

thanks

Nilam

Hi Nilam,

Aditya Ganjoo — Fri, 13 May 2016 15:54:17 GMT

Hi Nilam,

Yes the symptoms match the bug.

Are we using IPS on the ASA ?

I see IPS stuck in init state.

Checking the status you provided I think we need to start with trying to reset the IPS module from the ASA:

Please issue the following command in the ASA CLI:

asa# hw-module module 1 reset

If it comes up then I would suggest to upgrade the IPS to the recommended versions in the bug.

Regards,

Aditya

Please rate helpful posts and mark correct answers.

Where can I download the

nilambhate — Fri, 13 May 2016 16:37:05 GMT

Where can I download the appropriate software, and what are the steps to install it.

I saw that bug page gave downloads but they were for 4200 series and I have a 5555-x device.

Please advise

thanks

Nilam

Hello Aditya,

nilambhate — Mon, 16 May 2016 12:51:27 GMT

Hello Aditya,

Can you let me know where I can find the correct Patch to download as the ones I see on the bug search page are all related to 4200 Series where as I need it for 5555-x

Also is there any instructions on how to install the patch once I have the right software ?

Hi,

Aditya Ganjoo — Mon, 16 May 2016 13:27:29 GMT

Hi,

You can use the same image for the same.

You can also use this link for more info:

http://www.cisco.com/c/en/us/td/docs/security/ips/7-1/configuration/guide/cli/cliguide71/cli_system_images.html#wp1397646

Regards,

Aditya

Please rate helpful posts and mark correct answers.