cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

624
Views
10
Helpful
25
Replies

Installing FirePOWER software on Cisco ASA 5516-X.

Hi all,

 

When i try to install the FirePOWER software on Cisco ASA 5516-X and i issue the following command:

 

ASASFR-boot> system install ftp://192.168.2.4/asasfr-sys-6.2.2-81.pkg

 

It gives the following:

Verifying

 

110

Upgrade aborted

 

When i ping the address 192.168.2.4 normally, it replies, but inside the (ASASFR-boot>) it is not replying.

 

I configured the system with IPv4 address/mask, default gateway and DNS information, don't know what is missing.

 

Thanks in advance.

 

Khaled Omar

Everyone's tags (3)
1 ACCEPTED SOLUTION

Accepted Solutions
Hall of Fame Master

Re: Installing FirePOWER software on Cisco ASA 5516-X.

You cannot use a boot image that doesn't match the installation package.

25 REPLIES 25
Highlighted
Enthusiast

Re: Installing FirePOWER software on Cisco ASA 5516-X.

Hall of Fame Master

Re: Installing FirePOWER software on Cisco ASA 5516-X.

The image on your ftp server could be corrupted. Compare and verify the checksum with what's posted on Cisco's download page.

Re: Installing FirePOWER software on Cisco ASA 5516-X.

 

Re: Installing FirePOWER software on Cisco ASA 5516-X.

I didn't download the FirePOWER software image from Cisco website, i downloaded it from internet, how can i compare and verify the checksum?

Re: Installing FirePOWER software on Cisco ASA 5516-X.

I didn't download the FirePOWER software image from Cisco website, i downloaded it from internet, how can i compare and verify the checksum?

Everyone's tags (1)

Re: Installing FirePOWER software on Cisco ASA 5516-X.

The MD5 checksum is the same as in Cisco website.

Hall of Fame Master

Re: Installing FirePOWER software on Cisco ASA 5516-X.

Can you confirm that you are using the "asasfr-5500x-boot-6.2.2-3.img" boot image file that corresponds with the system installation package?

Re: Installing FirePOWER software on Cisco ASA 5516-X.

I use the following boot image:

 

asasfr-5500x-boot-5.4.1-211.img

Hall of Fame Master

Re: Installing FirePOWER software on Cisco ASA 5516-X.

You cannot use a boot image that doesn't match the installation package.

Re: Installing FirePOWER software on Cisco ASA 5516-X.

I uploaded the new boot image and removed the old boot image from flash, when i issue the following command:

ASA# sw-module module sfr recover boot

it gives the following error:

Module sfr cannot be recovered, please stop the current recovery before trying
to recover again.

When i issue the following command:

ASA# sw-module module sfr uninstall 

It gives the following error:

Module sfr cannot be uninstalled, not in Up, Down, or Unresponsive state.

 

How to stop the current recovery and then use the new boot image?

 

Hall of Fame Master

Re: Installing FirePOWER software on Cisco ASA 5516-X.

First try to shutdown the module:

sw-module module sfr shutdown

Re: Installing FirePOWER software on Cisco ASA 5516-X.

It gives the following output:

Module sfr cannot be shut down, not in Up or Unresponsive state.

 

The output of the "show module" command is:

Mod Card Type                                                                 Model                        Serial No.
---- -------------------------------------------- ------------------ -----------
  1   ASA 5516-X with FirePOWER services, 8GE, AC,       ASA5516                   JAD194803CU
 sfr  Unknown                                                                   N/A                            JAD194803CU

 

Mod  MAC Address Range                            Hw Version      Fw Version      Sw Version
---- --------------------------------- ------------ ------------ ---------------
1      00fe.c832.04b1 to 00fe.c832.04b9      2.1                  1.1.12             9.8(1)
sfr    00fe.c832.04b0 to 00fe.c832.04b0      N/A                 N/A

 

Mod  SSM Application Name                    Status                    SSM Application Version
---- ------------------------------ ---------------- --------------------------

 

Mod  Status                        Data Plane Status            Compatibility
---- ------------------ --------------------- -------------
 1     Up Sys                       Not Applicable
sfr    Recover                     Not Applicable

Hall of Fame Master

Re: Installing FirePOWER software on Cisco ASA 5516-X.

I know one of the options works because I've done it myself. I just don't recall which one it is for when we get into this indeterminate state.

You've tried shutdown and uninstall so the remaining options are reset and reload. Give them a try.

Re: Installing FirePOWER software on Cisco ASA 5516-X.

SYD-ASA5516X-FW01/stby# sw-module module sfr reset

Module sfr should be shut down before resetting it or loss of configuration
may occur.

 

Module sfr cannot be reset, please stop the current recovery before trying
to reset the module.


SYD-ASA5516X-FW01/stby# sw-module module sfr reload

Reload module sfr? [confirm]

Module sfr cannot be reloaded, not in Up state.

 

No more options.