topic Re: 5505 won't boot..... in Network Security

5505 won't boot.....

toddyboman — Mon, 11 Mar 2019 19:19:43 GMT

So I tried to update the image on my 5505 and I messed it up.........bad

So how do I get it back to the default settings....

Currently looking at the console editor is see:

Launching BootLoader...
Boot configuration file contains 1 entry.
Boot mode is 1. Default entry is 1.

Loading disk0:/asa812-smp-k8.bin... Booting...
Platform ASA5505

This SMP image cannot run on a ASA5505 system.

Rebooting....

CISCO SYSTEMS
Embedded BIOS Version 1.0(12)13 08/28/08 15:50:37.45

Low Memory: 632 KB
High Memory: 507 MB
PCI Device Table.
Bus Dev Func VendID DevID Class              Irq
00 01 00   1022   2080 Host Bridge
00 01 02   1022   2082 Chipset En/Decrypt 11
00 0C 00   1148   4320 Ethernet           11
00 0D 00   177D   0003 Network En/Decrypt 10
00 0F 00   1022   2090 ISA Bridge
00 0F 02   1022   2092 IDE Controller
00 0F 03   1022   2093 Audio              10
00 0F 04   1022   2094 Serial Bus         9
00 0F 05   1022   2095 Serial Bus         9

Evaluating BIOS Options ...
Launch BIOS Extension to setup ROMMON

Cisco Systems ROMMON Version (1.0(12)13) #0: Thu Aug 28 15:55:27 PDT 2008

Platform ASA5505
Ethernet0/0
MAC Address: d0d0.fd70.b698
Link is DOWN

Use ? for help.
rommon #0>

HELP.

Thanks for you help!

Re: 5505 won't boot.....

Jennifer Halim — Wed, 08 Dec 2010 04:04:26 GMT

You can't run ASA version 8.1.x (asa812-smp-k8.bin) on ASA5505 as this is not compatible.

ASA version 8.1 is only for ASA5580.

Please kindly upload either version 8.0.x or 8.2.x downloaded from cisco.com software download site.

Re: 5505 won't boot.....

toddyboman — Wed, 08 Dec 2010 04:16:47 GMT

I have asa805 downloaded......will that work?

If so how can I upload it to the device as I am now in this rommon stuff which seems to be different than the normal command line stuff.....

Thanks.

Re: 5505 won't boot.....

Leo Laohoo — Wed, 08 Dec 2010 04:19:55 GMT

Using the ROM Monitor to Load a Software Image

Re: 5505 won't boot.....

toddyboman — Wed, 08 Dec 2010 04:22:59 GMT

this link doesn't appear to work......

Re: 5505 won't boot.....

Leo Laohoo — Wed, 08 Dec 2010 04:25:55 GMT

Using the ROM Monitor to Load a Software Image

This section describes how to load a software image to an adaptive security appliance from the ROM monitor mode using TFTP.

To load a software image to an adaptive security appliance, perform the following steps:

Step 1 Connect to the adaptive security appliance console port according to the instructions in "Accessing the Command-Line Interface" section on page 2-4.

Step 2 Power off the adaptive security appliance, and then power it on.

Step 3 During startup, press the Escape key when you are prompted to enter ROMMON mode.

Step 4 In ROMMOM mode, define the interface settings to the adaptive security appliance, including the IP address, TFTP server address, gateway address, software image file, and port, as follows:

rommon #1> ADDRESS=10.132.44.177

rommon #2> SERVER=10.129.0.30

rommon #3> GATEWAY=10.132.44.1

rommon #4> IMAGE=f1/asa800-232-k8.bin

rommon #5> PORT=Ethernet0/0

Ethernet0/0

Link is UP

MAC Address: 0012.d949.15b8

Note Be sure that the connection to the network already exists.

Step 5 To validate your settings, enter the set command.

rommon #6> set

ROMMON Variable Settings:

  ADDRESS=10.132.44.177

  SERVER=10.129.0.30

  GATEWAY=10.132.44.1

  PORT=Ethernet0/0

  VLAN=untagged

  IMAGE=f1/asa800-232-k8.bin

  CONFIG=

  LINKTIMEOUT=20

  PKTTIMEOUT=4

  RETRY=20

Step 6 Ping the TFTP server by entering the ping server command.

rommon #7> ping server

Sending 20, 100-byte ICMP Echoes to server 10.129.0.30, timeout is 4 seconds:

Success rate is 100 percent (20/20)

Step 7 Load the software image by entering the tftp command.

rommon #8> tftp

ROMMON Variable Settings:

  ADDRESS=10.132.44.177

  SERVER=10.129.0.30

  GATEWAY=10.132.44.1

  PORT=Ethernet0/0

  VLAN=untagged

  IMAGE=f1/asa800-232-k8.bin

  CONFIG=

  LINKTIMEOUT=20

  PKTTIMEOUT=4

  RETRY=20

tftp f1/asa800-232-k8.bin@10.129.0.30 via 10.132.44.1

Received 14450688 bytes

Launching TFTP Image...

Cisco PIX Security Appliance admin loader (3.0) #0: Mon Mar  5 16:00:07 MST 2007

Loading...

Step 8 Reload the security appliance to run the new image.

rommon #9> reload

After the software image is successfully loaded, the security appliance automatically exits ROMMOM mode.

Step 9 To verify that the correct software image has been loaded into the adaptive security appliance, check the version in the adaptive security appliance by entering the following command:

hostname> show version

Re: 5505 won't boot.....

Kureli Sankar — Wed, 08 Dec 2010 04:38:38 GMT

so long as the file name that you downloaded does not contain "smp" it will load. "smp" is only for ASA5580s

not ASA5505s.

-KS

Re: 5505 won't boot.....

toddyboman — Wed, 08 Dec 2010 04:44:13 GMT

the file i have is asa805-k8.bin.

problem 1 - I can't seem to have any success with the ping server command.

problem 2 - I am confussed with this command?

rommon #4> IMAGE=f1/asa800-232-k8.bin

when I move on down to the actually fftp command I am concerned about where the file is save and where the device is looking for it on the server....

Re: 5505 won't boot.....

Maykol Rojas — Wed, 08 Dec 2010 05:24:54 GMT

Hello Todd,

Hope you are doing fine, when you turn on the interface, say interface Eth 0/0, do you see it coming up?

Let me know.

Mike

Re: 5505 won't boot.....

toddyboman — Wed, 08 Dec 2010 05:30:58 GMT

Hey Mike!

Looks like it!

Platform ASA5505

Ethernet0/0

mac address: d0d0.fd70.b698

Link is UP

Re: 5505 won't boot.....

toddyboman — Sun, 12 Dec 2010 23:44:21 GMT

When I get to the ping server command.....

I get a 0% success rate......

The LINK is up.

I am able to ping the gateway with 100% success but I am not able to ping any other ip....

Any suggestions?

Thanks.

Re: 5505 won't boot.....

Kureli Sankar — Mon, 13 Dec 2010 00:28:10 GMT

So you got the code uploaded onto the unit?

You are able to ping the GW meaning you are able to ping the closest interface on the ASA to your client but, not other IP addresses that are configured on the ASA? If so, you can only ping the closest interface to your client.

If it that you cannot ping IP address outside the ASA then, may be it is not configured for nat/global or there is no "icmp inspection" configured.

Let me know what exactly is the problem.

-KS

Re: 5505 won't boot.....

toddyboman — Mon, 13 Dec 2010 02:01:27 GMT

I have attached my 5505 to my desktop via patch cable. So nothing is between the asa and the desktop

I also have that same desktop connected to the asa via console mgmt port to access the cmd line prompts.

But can not ping the pc......nor can the pc ping the asa.....

Re: 5505 won't boot.....

Maykol Rojas — Mon, 13 Dec 2010 15:29:16 GMT

Hello,

Does the computer has any kind of firewall configured? Seems like it.

Let us know.

Mike