topic Re: PIX 515 boot in loop in Network Security

PIX 515 boot in loop

hlecalon — Mon, 11 Mar 2019 14:17:11 GMT

after a upgrade to v7.2.3

device is in a loop boot due to a bad config file.

how can i erase my config as i can't loginto my device ??

Re: PIX 515 boot in loop

andrew.prince — Mon, 24 Nov 2008 14:03:38 GMT

http://www.cisco.com/en/US/docs/security/asa/asa71/configuration/guide/trouble.html#wp1049302

Read the above for password recovery procdure.

HTH>

Re: PIX 515 boot in loop

hlecalon — Mon, 24 Nov 2008 16:40:08 GMT

hello,

actually i can't log into my device because it crashes while proceding my config file :

WARNING: The trustpoint will not be set for crypto map entry 'vers_partenaires3'

> , sequence number 84, as there was already a pre-shared-key specified for a peer

> in this crypto map entry. In order to initiate Isakmp tunnels using certificate

> s, the crypto map must indicate wh

> Thread Name: pix_flash_config_thread (Old pc 0x0085eefd ebp 0x02605f18)

> vector 0x00000003 (breakpoint)

> edi 0x02605cd0

> esi 0x00003a99

> ebp 0x02605c84

> esp 0x02605c78

> ebx 0x0168fe50

> edx 0x00000007

> ecx 0x0168fe88

> eax 0x27ba7755

> error code n/a

> eip 0x0107f79c

> cs 0x00000008

> eflags 0x00000046

> CR2 0x00000000

> Cisco PIX Security Appliance Software Version 7.2(3)

> Compiled on Wed 15-Aug-07 16:08 by builders

i dont' kwown how to fix it !!!

Re: PIX 515 boot in loop

andrew.prince — Mon, 24 Nov 2008 16:45:13 GMT

If you have followed the password recovery procedure - you will know that you are actually interupting the boot process, BEFORE the device actually loads the config file.

I suggest you read the link I posted and try it.

HTH>

Re: PIX 515 boot in loop

hlecalon — Mon, 24 Nov 2008 17:30:02 GMT

hello, thanks for you information about the password recovery procedure, but the actual problem is that my device boots with 7.2.3 version of software and starts to proceed my configfile that was imported from V6.3 and the device crashes while proceding the configfile so that i'm not able to type any command line into it in order to erase my flash of config file. so i was wondering how it was possible to clear flash without being logged into the device.

i have already tried the password recovery procedure, because i hoped that it coul'd help me to clear my config file

Best regards

Re: PIX 515 boot in loop

mike.keller — Mon, 24 Nov 2008 18:15:05 GMT

During the bootup, press the esc key during the first 10 seconds. The boot process will look similar to this:

Cisco Secure PIX Firewall BIOS (4.2) #0: Mon Dec 31 08:34:35 PST 2001

Platform PIX-515E

System Flash=E28F128J3 @ 0xfff00000

Use BREAK or ESC to interrupt flash boot.

Use SPACE to begin flash boot immediately.

Flash boot interrupted.

0: i8255X @ PCI(bus:0 dev:14 irq:10)

1: i8255X @ PCI(bus:0 dev:13 irq:11)

2: i8255X @ PCI(bus:1 dev:0 irq:11)

3: i8255X @ PCI(bus:1 dev:1 irq:10)

4: i8255X @ PCI(bus:1 dev:2 irq:9 )

5: i8255X @ PCI(bus:1 dev:3 irq:5 )

Ethernet auto negotiation timed out.

Ethernet port 1 could not be initialized.

Use ? for help.

monitor>

Now you can follow the password recovery procedure and boot without a config. Once the pix is booted, you can erase your old config by typing: "write erase" or "clear configure all".

Re: PIX 515 boot in loop

hlecalon — Wed, 26 Nov 2008 08:31:25 GMT

hello thanks again for this explication, i managed to clear the password from the pix.

BUT when it'e reboots, il start to load the config file and then crashes so that i can't type any command to clear my config file

Re: PIX 515 boot in loop

mike.keller — Thu, 27 Nov 2008 17:04:25 GMT

Follow the upgrade procedure and load your os via tftp. Once it has loaded, either copy the config OFF of the pix, delete the local copy and reboot, or erase the config using the commands in my previous message.

Please rate if helpful.

Re: PIX 515 boot in loop

hlecalon — Fri, 28 Nov 2008 08:20:44 GMT

Thanks, when i try to apply the upgrade procedure i have this message :

Received 2193408 bytes

Cisco Secure PIX Firewall admin loader (3.0) #0: Tue May 21 08:26:10 PDT 2002

Flash=i28F640J5 @ 0x300

BIOS Flash=AT29C257 @ 0xd8000

An internal assertion check has failed.

Copy the following message exactly as it appears,

along with any visible version strings, and

then call your support representative.

assertion "addr < STRATA_CHIPSIZE" failed: file "../flash/strata.c", line 222

Rebooting....

i'am stuck in it. do ypu have any ideas ?

Re: PIX 515 boot in loop

Pravin Phadte — Mon, 01 Dec 2008 07:34:08 GMT

Hi,

PIX has this problem.

1. It can be possible a hardware problem.

2. Software Image not uploaded or damaged.

----

1. Try to revert back to the old IOS running on the pix.

get the traceback logs from the pix after reload to troubleshoot more.

2. Try to reupload a new image.