topic Bootloop on CISCO with IOS 8.2(1) in Network Security

Bootloop on CISCO with IOS 8.2(1)

Luis Carranza — Mon, 11 Mar 2019 20:51:25 GMT

Hello:

Well I just had an issue last weekend, we got a mainteinace of a firewall where the engineer had to turn of the device and open the case to cleaning it with compressed air and when he finished and turn on the devices the firewall was acting weird because it was rebooting every time that the device finished to load all the configuration, I was checking this with a CISCO engineer an he told me that the problem was because we were hitting a bug, the bug is CSCtb07060

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId= CSCtb07060

And as I was checking it says that maybe the problem is when you have the IOS 8.2(1) with more than 25 o 30 subinterfaces and the bug fixes on the IOS 8.2(4). I was working with this IOS since april or may I don't remember and everything was working fine so it was only when we turn off the device that this bootloop happens. And in fact I have another devices with more than 30 subinterfaces configured and I was wonder if this going to happen on those ASAs.

Does anybody have this problem before or something related to?

Regards

Bootloop on CISCO with IOS 8.2(1)

Maykol Rojas — Tue, 28 Jun 2011 05:51:36 GMT

Luis,

The problem is not going to be present until you reload the Unit, I know you have been running with this firewall for sometime now, and that you have others too, but there are some conditions that need to be met prior the ASA to fall on this bug such as the Firewall im multiple conext, 25 to 30 subinterfaces, and version 8.2.1.

I am sure that if you reload the other ASA firewall is going to fall into this bug. The reason why you have not get this error before it should be because you have not reloaded the other ASAs, you have added more vlans since the last reload etc.

However, to be in safe ground, I would suggest you to upgrade.

Mike

Bootloop on CISCO with IOS 8.2(1)

Luis Carranza — Tue, 28 Jun 2011 16:08:53 GMT

Hi Mike:

I was checking another devices that are working with the IOS 8.2(1) and I found that some of them got more than 25, in fact there is one that have 35 subinterfaces configured and this device was already rebooted and nothing happens, so I am not conviced at all with this bug, because if what are you saying is correct I should have this problem with the ASA that have the IOS 8.2(1) and the 35 subinterfaces.

Maybe this is something different, I guess ...

Regards

Bootloop on CISCO with IOS 8.2(1)

Maykol Rojas — Tue, 28 Jun 2011 16:23:23 GMT

Do they have SSM modules? The one that you own and that hit this bug has one?

Mike

Bootloop on CISCO with IOS 8.2(1)

Luis Carranza — Tue, 28 Jun 2011 16:33:39 GMT

The one that hit the bug had a SSM module, the other 5 also have SSM modules

Regards

Bootloop on CISCO with IOS 8.2(1)

Maykol Rojas — Tue, 28 Jun 2011 16:42:35 GMT

I'll say that you may want to take a look at the related bug CSCte12203. It states

"Under rare conditions the ASA has problems supporting +30 subinterfaces with an AIP-SSM installed"

So I stand corrected, it wont be for sure that is going to have the bug, it just may hit it. To be on safe ground, you will need to update the code.

Mike Rojas

Bootloop on CISCO with IOS 8.2(1)

Luis Carranza — Tue, 28 Jun 2011 16:47:13 GMT

I also see that but I'm not sure what they mean with rare conditions...

Bootloop on CISCO with IOS 8.2(1)

Maykol Rojas — Tue, 28 Jun 2011 17:06:38 GMT

Rare conditions means that the device may reload or not having the type of configuration described that produces the bug.

Mike

Bootloop on CISCO with IOS 8.2(1)

Luis Carranza — Tue, 28 Jun 2011 17:16:58 GMT

Ok Mike, well I will made some test with a device that I have in the lab, meanwhile I will upgrade the ASAs with more than 25 vlans to prevent this kind of problems.

Thanks for your help