Software Issues on ASA5510

Justin Hale — Mon, 11 Mar 2019 21:08:22 GMT

HI Guys,

i have an ASA 5510. it was running asa708-k8.bin and i have attempted to install asa821-k8.bin. i have done this on many ASAs before effortlessly.

this time i have had an issue. the ASA will not load the new image, and for some reason will not even load the old.

the ASA seems to just keep crashing. i have erased disk0 (advised in forum): and attempted to load the image from tftp. please see below. i know i need to re-formaet the flash, but cannot get into the ASA at all to complete this.

has anyone seen this before?

=========================================================

CISCO SYSTEMS

Embedded BIOS Version 1.0(11)5 08/28/08 15:11:51.82

Low Memory: 631 KB

High Memory: 256 MB

PCI Device Table.

Bus Dev Func VendID DevID Class Irq

00 00 00 8086 2578 Host Bridge

00 01 00 8086 2579 PCI-to-PCI Bridge

00 03 00 8086 257B PCI-to-PCI Bridge

00 1C 00 8086 25AE PCI-to-PCI Bridge

00 1D 00 8086 25A9 Serial Bus 11

00 1D 01 8086 25AA Serial Bus 10

00 1D 04 8086 25AB System

00 1D 05 8086 25AC IRQ Controller

00 1D 07 8086 25AD Serial Bus 9

00 1E 00 8086 244E PCI-to-PCI Bridge

00 1F 00 8086 25A1 ISA Bridge

00 1F 02 8086 25A3 IDE Controller 11

00 1F 03 8086 25A4 Serial Bus 5

00 1F 05 8086 25A6 Audio 5

02 01 00 8086 1075 Ethernet 11

03 01 00 177D 0003 Encrypt/Decrypt 9

03 02 00 8086 1079 Ethernet 9

03 02 01 8086 1079 Ethernet 9

03 03 00 8086 1079 Ethernet 9

03 03 01 8086 1079 Ethernet 9

04 02 00 8086 1209 Ethernet 11

04 03 00 8086 1209 Ethernet 5

Evaluating BIOS Options ...

Launch BIOS Extension to setup ROMMON

Cisco Systems ROMMON Version (1.0(11)5) #0: Thu Aug 28 15:23:50 PDT 2008

Platform ASA5510

Use BREAK or ESC to interrupt boot. Use SPACE to begin boot immediately. Boot in 10 seconds.

Ethernet0/1

Link is UP

MAC Address: 001f.9e9b.d5b7

ROMMON Variable Settings:

ADDRESS=172.20.95.105

SERVER=172.20.87.11

GATEWAY=172.20.95.254

PORT=Ethernet0/1

VLAN=untagged

IMAGE=asa708-k8.bin

CONFIG=

LINKTIMEOUT=20

PKTTIMEOUT=4

RETRY=20

tftp asa708-k8.bin@172.20.87.11 via 172.20.95.254

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

Received 5548032 bytes

Launching TFTP Image...

Cisco Security Appliance admin loader (3.0) #0: Sat May 31 22:48:39 PDT 2008

########################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################

256MB RAM

Total SSMs found: 0

Total NICs found: 7

mcwa i82557 Ethernet at irq 11 MAC: 001f.9e9b.d5b5

mcwa i82557 Ethernet at irq 5 MAC: 0000.0001.0001

i82546GB rev03 Ethernet @ irq09 dev 3 index 00 MAC: 001f.9e9b.d5b6

i82546GB rev03 Ethernet @ irq09 dev 3 index 01 MAC: 001f.9e9b.d5b7

i82546GB rev03 Ethernet @ irq09 dev 2 index 02 MAC: 001f.9e9b.d5b8

i82546GB rev03 Ethernet @ irq09 dev 2 index 03 MAC: 001f.9e9b.d5b9

i82547GI rev00 Gigabit Ethernet @ irq11 dev 1 index 05 MAC: 0000.0001.0002

INFO: Unable to read firewall mode from flash

Writing default firewall mode (single) to flash

WARNING: Unable to write firewall mode to flash, this is normal if flash is

not formatted.

Running Activation Key: 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000

This activation key is not valid, use default settings only

Encryption hardware device : Cisco ASA-55x0 on-board accelerator (revision 0x0)

Boot microcode : ^CNlite-MC-Boot-Cisco-1.2

SSL/IKE microcode: ^CNlite-MC-IPSEC-Admin-3.03

IPSec microcode : ^CNlite-MC-IPSECm-MAIN-2.05

Cisco Adaptive Security Appliance Software Version 7.0(8)

Additional 1 interface(s) are disabled

****************************** Warning *******************************

This product contains cryptographic features and is

subject to United States and local country laws

governing, import, export, transfer, and use.

Delivery of Cisco cryptographic products does not

imply third-party authority to import, export,

distribute, or use encryption. Importers, exporters,

distributors and users are responsible for compliance

with U.S. and local country laws. By using this

product you agree to comply with applicable laws and

regulations. If you are unable to comply with U.S.

and local laws, return the enclosed items immediately.

A summary of U.S. laws governing Cisco cryptographic

products may be found at:

http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by

sending email to export@cisco.com.

******************************* Warning *******************************

Restricted Rights Legend

Use, duplication, or disclosure by the Government is

subject to restrictions as set forth in subparagraph

Rights clause at FAR sec. 52.227-19 and subparagraph

Software clause at DFARS sec. 252.227-7013.

Cisco Systems, Inc.

170 West Tasman Drive

San Jose, California 95134-1706

open or write(ffsdev/2/write/32) failed

Could not initialize system files in flash.

Thread Name: 557statspoll (Old pc 0x0043e80e ebp 0x0193a2ec)

vector 0x00000003 (breakpoint)

edi 0x01268258

esi 0x011d1fd8

ebp 0x0193a268

esp 0x0193a25c

ebx 0x00003aa2

edx 0x00004a42

ecx 0x01094fb8

eax 0x00004a42

error code n/a

eip 0x00c87e4c

cs 0x00000008

eflags 0x00000046

CR2 0x00000000

Cisco Adaptive Security Appliance Software Version 7.0(8)

Compiled on Sat 31-May-08 23:48 by builders

Crashinfo collected on 18:16:01.010 UTC Fri Aug 5 2011

Traceback:

0: 0010ce16

1: 0010f811

2: 00110431

3: 00115491

4: 0010be92

5: 0010016e

6: 0043d96b

7: 00113745

Stack dump: base:0x01938388 size:8192, active:428

entries above '==': return PC preceded by input parameters

entries below '==': local variables followed by saved regs

'==Fn': stack frame n, contains next stack frame

'*': stack pointer at crash

For example:

0xeeeeef00: 0x005d0707 : arg3

0xeeeeeefc: 0x00000159 : arg2

0xeeeeeef8: 0x005d0722 : arg1

0xeeeeeef4: 0x005d1754 : return PC

0xeeeeeef0: 0xeeeeef20 ==F2: stack frame F2

0xeeeeeeec: 0x00def9e0 : local variable

0xeeeeeee8: 0x0187df9e : local variable or saved reg

0xeeeeeee4: 0x01191548 : local variable or saved reg

0xeeeeeee0: 0x014dde20 : local variable or saved reg

0x0193a384: 0x00000000

0x0193a380: 0x0043d94c

0x0193a37c-0x0193a378: 0x00000000 ==F6

0x0193a374-0x0193a358: 0x12345678

0x0193a354: 0x00000000

0x0193a350: 0x00113745

0x0193a34c: 0x0193a378 ==F5

0x0193a348-0x0193a338: 0x12345678

0x0193a334: 0x00000000

0x0193a330-0x0193a32c: 0x12345678

0x0193a328: 0x00000001

0x0193a324: 0x011d1fd8

0x0193a320: 0x0043d96b

0x0193a31c: 0x0193a34c ==F4

0x0193a318: 0x011d20a0

0x0193a314-0x0193a310: 0x12345678

0x0193a30c-0x0193a308: 0x00000000

0x0193a304: 0x011d1fd8

0x0193a300: 0x00000202

0x0193a2fc: 0x00000008

0x0193a2f8: 0x0043e7ef

0x0193a2f4: 0xf8340070

0x0193a2f0: 0x011d20a0

0x0193a2ec: 0xf8340000

0x0193a2e8: 0x012681b0

0x0193a2e4: 0x0193a2f8

0x0193a2e0: 0x0193a31c

0x0193a2dc: 0x011d1fd8

0x0193a2d8: 0x01268258

0x0193a2d4: 0x00000020

0x0193a2d0: 0x0193a2d4

0x0193a2cc: 0x0010016e

0x0193a2c8: 0x0193a31c ==F3

0x0193a2c4: 0x011d1fd8

0x0193a2c0: 0x012681b0

0x0193a2bc: 0x0193a2ec

0x0193a2b8: 0x00000000

0x0193a2b4: 0x00000fa0

0x0193a2b0: 0x00fb91f8

0x0193a2ac: 0x0010be70

0x0193a2a8: 0x0193a2c8

0x0193a2a4-0x0193a2a0: 0x0193a2d4

0x0193a29c: 0x0010be92

0x0193a298: 0x0193a2c8 ==F2

0x0193a294: 0x0193a2b4

0x0193a290: 0x00111a97

0x0193a28c: 0x0193a2bc

0x0193a288: 0x01268258

0x0193a284: 0x011d1fd8

0x0193a280: 0x0193a2d4

0x0193a27c: 0x0193a2bc

0x0193a278-0x0193a274: 0x12345678

0x0193a270: 0x01094fb8

0x0193a26c: 0x00115491

0x0193a268: 0x0193a298 ==F1

0x0193a264: 0x00000046

0x0193a260: 0x00000008

0x0193a25c: 0x00c87e4c *

0x0193a258: 0x00004a42

0x0193a254: 0x01094fb8

0x0193a250: 0x00004a42

0x0193a24c: 0x00003aa2

0x0193a248: 0x0193a25c

0x0193a244: 0x0193a268

0x0193a240: 0x011d1fd8

0x0193a23c: 0x01268258

0x0193a238: 0x00000003

0x0193a234: 0x00110431

0x0193a230: 0x0193a268

0x0193a22c: 0x00000046

0x0193a228: 0x00000008

0x0193a224: 0x00c87e4c

0x0193a220: 0x00004a42

0x0193a21c: 0x01094fb8

0x0193a218: 0x00004a42

0x0193a214: 0x00003aa2

0x0193a210: 0x0193a25c

0x0193a20c: 0x0193a268

0x0193a208: 0x011d1fd8

0x0193a204: 0x01268258

0x0193a200: 0x00000003

0x0193a1fc: 0x00000001

0x0193a1f8: 0x010951cc

0x0193a1f4: 0x12345678

0x0193a1f0: 0x01268258

0x0193a1ec: 0x011d1fd8

0x0193a1e8: 0x00003aa2

0x0193a1e4: 0x0193a2ec

0x0193a1e0: 0x0043e80e

0x0193a1dc: 0x0043d704

Begin to dump crashinfo to flash....

Ignoring startup configuration as instructed by configuration register.

The flash device is in use by another task.

Type help or '?' for a list of available commands.

ciscoasa>

End of console dump.

Do 'show crashinfo' after reboot to retrieve other crash information

Rebooting....

Booting system, please wait...

Software Issues on ASA5510

Maykol Rojas — Sun, 07 Aug 2011 04:34:22 GMT

Hi,

The ASA is crashing, hence it may be a software defect. It would be better for you to open a ticket with TAC. If you are doing an upgrade to 8.2.1, check if you dont have any class maps or policy maps doing nothing on the device, Ive heard issues related to that.

My advice, try 8.2.2, if problem persist, open a ticket with TAC.

Mike

Software Issues on ASA5510

Justin Hale — Mon, 08 Aug 2011 00:53:53 GMT

Hi Mate,

i tried loading asa822-k8.bin as advised, still no joy im affraid. this issue is unbelievable. :S.

going to try a complete Power down and restart. i have not been able to do this yet as the ASA is in another country.

will log a call with TAC, hopefully the ASA is not dead!!

thanks.

topic Software Issues on ASA5510 in Network Security

Software Issues on ASA5510

Software Issues on ASA5510

Software Issues on ASA5510