topic Re: ASA 5506 stuck in endless loop cycle in Network Security

ASA 5506 stuck in endless loop cycle

talal.tayar — Tue, 14 May 2019 03:19:10 GMT

Good day,

I just started a new 5506 ASA (HW v01) and it instantly stuck in an endless reboot cycle.

As it seems, there is an invalid image on the ASA:

rommon 2 > dir disk0:

File System: FAT32

drw- 3 0 .private

drw- 4 0 .iso_images

-rw- 11 74369568 asa951-lfbff-k8.spa

-rw- 18168 25025404 asdm-751.bin

-rw- 851175 58 .boot_string

drw- 24334 0 log

drw- 24337 0 crypto_archive

drw- 24338 0 csco_config

-rw- 24415 4096 FSCK0000.REC

-rw- 24416 4096 FSCK0001.REC

drw- 24423 0 coredumpinfo

-rw- 822827 86704128 asa961-smp-k8.bin

-rw- 821488 4096 FSCK0002.REC

drw- 34639 0 vm

-rw- 821489 28672 FSCK0003.REC

-rw- 821496 4096 FSCK0004.REC

-rw- 843995 12204 oldconfig_2016Apr13_1800.cfg

-rw- 843998 25819140 asdm-761.bin

From what I know, these new ASA units require a digitally signed image (SPA) so having found one on the device, I tried booting it with no luck.

I am attaching the errors I am getting.

This is a brand new device (although HW V01) but I am trying to make the most of it while I get a Smartnet account and an RMA.

Re: ASA 5506 stuck in endless loop cycle

johnd2310 — Tue, 14 May 2019 04:10:17 GMT

Hi,

asa961-smp-k8.bin is NOT a valid image for the 5506. asa951-lfbff-k8.spa could be corrupt. Verify the asa951-lfbff-k8.spa and try booting the asa from tftp.

You can find the procedure for loading the image from tftp at the following link:

https://www.cisco.com/c/en/us/td/docs/security/asa/asa95/configuration/general/asa-95-general-config/admin-swconfig.html#ID-2152-000008e3

Thanks

John

Re: ASA 5506 stuck in endless loop cycle

Marvin Rhoads — Tue, 14 May 2019 05:21:17 GMT

In addition to what @johnd2310 said, I'd recommend you delete asa961-smp-k8.bin from disk. There's no need for that image to be there as it will never be allowed to boot on an ASA 5506.

Re: ASA 5506 stuck in endless loop cycle

talal.tayar — Tue, 14 May 2019 14:55:31 GMT

How do I delete an individual file from disk0 in Rommon mode?

Also how do I copy the current files from the disk TO the tftp server so I check file integrity?

Re: ASA 5506 stuck in endless loop cycle

talal.tayar — Tue, 14 May 2019 17:48:25 GMT

Tried booting 9.82 over tftp but still got the same behavior.

The errors are:

%ERROR% - Did not find Octeon. Read failure!
%WARNING% - Failed to detect critical PCI devices

I do not think I have a warranty.

What do I do in this case? Buy a new one or buy a smartnet for the ASA?

PS. I contacted router-switch.com and shared the S/N of the ASA. They said they can't get me a smartnet for it but did not say why