topic Re: ASA Keeps booting to Rommon! in Network Security

ASA Keeps booting to Rommon!

chrisbicm — Fri, 21 Feb 2020 08:57:15 GMT

Hello,

I recently had to re-format, add a new activation-key, and add the asdm504.bin and asa704-k8.bin to my ASA 5520 (I accidentaly erased the memory on the machine). Now currently everytime I use the "reload" command it just loads straight into Rommon#.... when I get to the Rommon# prompt all I have to do is type.... "boot" and it loads my asa704-k8.bin file and loads up my config and looks good. I am just wondering is there a way that I would be able to easily set it so it loads the image automatically?

asa2(config)#show boot

BOOT variable = disk0:/asa704-k8.bin

Current BOOT variable = disk0:/asa704-k8.bin

CONFIG_FILE variable = disk0:/startup-config

Current CONFIG_FILE variable = disk0:/startup-config

asa2(config)# show disk0:

Initializing disk0: cache, please wait....Done.

-#- --length-- -----date/time------ path

8 2995 Jun 07 2006 06:30:02 startup-config

9 5437440 Jun 07 2006 06:18:04 asa704-k8.bin

10 5958324 Jun 07 2006 06:24:08 asdm504.bin

51515392 bytes available (11431936 bytes used)

Thanks,

Chris

Re: ASA Keeps booting to Rommon!

tvanginneken — Thu, 08 Jun 2006 18:29:41 GMT

Hi,

try adding the "boot system disk0:/asa7xx-k8.bin" to your config.

Kind Regards,

Tom

Re: ASA Keeps booting to Rommon!

chrisbicm — Thu, 08 Jun 2006 19:05:28 GMT

Tom,

Thanks a lot for the response, I gave that a try and I got the following error. I have no clue what is going on and I dont know why it wont boot the image.... even though it says it should.

icm-asa2(config)# boot system disk0:/asa704-k8.bin

ERROR: Unable to set this url, it has already been set

Remove the first instance before adding this one

Thanks,

Chris

ps: Im not sure but I have a feeling its something I have to set within the Rommon prompt but I have no idea what.... Unfortunately

Re: ASA Keeps booting to Rommon!

tvanginneken — Fri, 09 Jun 2006 06:16:49 GMT

Hi Chris,

could you have a look in the config and see if the is already a "boot system" command present? Remove it (if it's there) and replace it with the right one.

Regards,

Tom

Re: ASA Keeps booting to Rommon!

chrisbicm — Fri, 09 Jun 2006 14:25:14 GMT

Tom,

I took a look at the config and the only "boot system" command was pointing to my asa704-k8.bin file so I am really at a loss here. I am fairly certain as I mentioned it must be something in Rommon that needs to be set at initial boot but I am just not sure what to set to make it so its doesnt boot into Rommon and just loads my .bin file. Any other suggestions?

Here is a readout of what it says after I reload:

Evaluating BIOS Options ...

Launch BIOS Extension to setup ROMMON

Cisco Systems ROMMON Version (1.0(10)0) #0: Fri Mar 25 23:02:10 PST 2005

Platform ASA5520

Management0/0

Ethernet auto negotiation timed out.

Interface-4 Link Not Established (check cable).

Default Interface number-4 Not Up

Use ? for help.

rommon #0>

I am not sure why it is trying to use the Interface-4?

Thanks a lot for the help,

Chris

Re: ASA Keeps booting to Rommon!

sean — Fri, 09 Jun 2006 17:37:54 GMT

I ran into a similar issue awhile back. Make sure your config register is set to:

Configuration register is 0x1

This kinda threw me off as it is different from routers. Hope this helps.

Re: ASA Keeps booting to Rommon!

chrisbicm — Fri, 09 Jun 2006 17:57:11 GMT

Sean,

If I use the confreg command, that will erase all my current configurations correct? And also will that erase my asa704-k8.bin file from my disk0: or just my startup and running configs?

Thanks a lot (so close to fixing this finally),

Chris

Re: ASA Keeps booting to Rommon!

a.kiprawih — Fri, 09 Jun 2006 18:46:29 GMT

Hi Chris,

Check the current confreg value using:

rommon #1> confreg

When ASA asked to change, choose no 'n'. What's the stated value?

The reason why your ASA always boot to rommon was due to the confreg value where if character numbers 0 and 1 are not set to automatically boot an image, then the security appliance by default will boot directly into ROMMON.

That's why you need to manually execute 'boot' to make the firewall boot to normal operational mode.

http://www.cisco.com/univercd/cc/td/doc/product/multisec/asa_sw/v_70/cref_txt/c.htm#wp1968384

The value '0x1' is to allow ASA to boot from your specified boot system (local flash - disk0:/asaxxxx.bin).

It will not erase your config & image file, but always keep your last known good configuration as backup. Image file can on;y be deleted using delete or erase command, or if format the flash.

Rgds,

Re: ASA Keeps booting to Rommon!

chrisbicm — Fri, 09 Jun 2006 19:01:58 GMT

Ak,

Yeah my Confreg value is:0x00112002

would you be able to provide me with the command I enter in rommon to set the confreg back, I assume its just confreg = 0x1 but Id like to make sure

Thanks (As always you've been a great help)

Chris

Re: ASA Keeps booting to Rommon!

a.kiprawih — Fri, 09 Jun 2006 19:03:48 GMT

And also, if your boot system returned error message:

ERROR: Unable to set this url, it has already been set

Remove the first instance before adding this one

Try to change it to use flash -> boot system flash:/asa704-k8.bin, OR clear it first before re-enter the boot system command.

This option is only available for the ASA platform, and indicates the internal Flash card. Any keyword flash or disk0 can be used as they are aliased.

http://www.cisco.com/univercd/cc/td/doc/product/multisec/asa_sw/v_70/cref_txt/ab.htm#wp1348883

Rgds,

Re: ASA Keeps booting to Rommon!

a.kiprawih — Fri, 09 Jun 2006 19:13:02 GMT

Hi Chris,

0x00112002 -> meaning boot from TFTP server, if fails, go to rommon.

The "config-register 0x1' is ok, as this will instruct ASA to load from default image.

As a precaution (same goes to me), pls backup the config (evem though it will not delete the config file).

Rgds,

Re: ASA Keeps booting to Rommon!

chrisbicm — Fri, 09 Jun 2006 19:15:31 GMT

AK,

Wow thanks a lot... without your help I would still be wondering why it was going into Rommon and I wouldnt even have my new image from my tftp server, you saved me big time

THANKS!!!

Chris

Re: ASA Keeps booting to Rommon!

a.kiprawih — Fri, 09 Jun 2006 19:20:07 GMT

Glad to help you on that.

Cheers!

ASA Keeps booting to Rommon!

cjohnson — Fri, 31 May 2013 17:48:52 GMT

This is what I did to mine to fix this same issue ... answer NO to everything except ENABLE FLASH BOOT (Y) and then type reload... then it should pickup the default boot image... thought I'd throw this in there as its the easiest way. cheers

rommon #1> confreg

Current Configuration Register: 0x00000000

Configuration Summary:

boot ROMMON

Do you wish to change this configuration? y/n [n]: y

enable boot to ROMMON prompt? y/n [n]: n

enable TFTP netboot? y/n [n]: n

enable Flash boot? y/n [n]: y

select specific Flash image index? y/n [n]: n

disable system configuration? y/n [n]: n

go to ROMMON prompt if netboot fails? y/n [n]: n

enable passing NVRAM file specs in auto-boot mode? y/n [n]: n

disable display of BREAK or ESC key prompt during auto-boot? y/n [n]: n

no boot system disk0:/asa704

srinu.allamani — Thu, 27 Aug 2015 12:13:21 GMT

no boot system disk0:/asa704-k8.bin

Re: ASA Keeps booting to Rommon!

diksha — Tue, 24 Jul 2018 22:28:15 GMT

Hi,

just type in a command in config(t)# no config-register

after this it will automatically boot from rommon mode

Re: ASA Keeps booting to Rommon!

nikhil121 — Tue, 28 Apr 2020 14:52:00 GMT

It means you have already set boot image .. Just change the config-register value to 0x2102 and then reload it

Re: ASA Keeps booting to Rommon!

nikhil121 — Tue, 28 Apr 2020 14:59:04 GMT

sorry 0x1

Re: ASA Keeps booting to Rommon!

ANIMATEK — Fri, 02 Jul 2021 06:02:50 GMT

This command was invalid from me, but I'm running ASA on a Firepower so maybe that's why.

Re: ASA Keeps booting to Rommon!

ANIMATEK — Fri, 02 Jul 2021 06:03:39 GMT

This is what really helped me now (2021). The promps were different, but the concept was the same.