cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
6953
Views
20
Helpful
26
Replies

Installing FirePOWER software on Cisco ASA 5516-X.

eng.khaled.omar
Level 1
Level 1

Hi all,

 

When i try to install the FirePOWER software on Cisco ASA 5516-X and i issue the following command:

 

ASASFR-boot> system install ftp://192.168.2.4/asasfr-sys-6.2.2-81.pkg

 

It gives the following:

Verifying

 

110

Upgrade aborted

 

When i ping the address 192.168.2.4 normally, it replies, but inside the (ASASFR-boot>) it is not replying.

 

I configured the system with IPv4 address/mask, default gateway and DNS information, don't know what is missing.

 

Thanks in advance.

 

Khaled Omar

1 Accepted Solution

Accepted Solutions

You cannot use a boot image that doesn't match the installation package.

View solution in original post

26 Replies 26

Abheesh Kumar
VIP Alumni
VIP Alumni

Marvin Rhoads
Hall of Fame
Hall of Fame

The image on your ftp server could be corrupted. Compare and verify the checksum with what's posted on Cisco's download page.

 

I didn't download the FirePOWER software image from Cisco website, i downloaded it from internet, how can i compare and verify the checksum?

I didn't download the FirePOWER software image from Cisco website, i downloaded it from internet, how can i compare and verify the checksum?

The MD5 checksum is the same as in Cisco website.

Can you confirm that you are using the "asasfr-5500x-boot-6.2.2-3.img" boot image file that corresponds with the system installation package?

I use the following boot image:

 

asasfr-5500x-boot-5.4.1-211.img

You cannot use a boot image that doesn't match the installation package.

I uploaded the new boot image and removed the old boot image from flash, when i issue the following command:

ASA# sw-module module sfr recover boot

it gives the following error:

Module sfr cannot be recovered, please stop the current recovery before trying
to recover again.

When i issue the following command:

ASA# sw-module module sfr uninstall 

It gives the following error:

Module sfr cannot be uninstalled, not in Up, Down, or Unresponsive state.

 

How to stop the current recovery and then use the new boot image?

 

First try to shutdown the module:

sw-module module sfr shutdown

It gives the following output:

Module sfr cannot be shut down, not in Up or Unresponsive state.

 

The output of the "show module" command is:

Mod Card Type                                                                 Model                        Serial No.
---- -------------------------------------------- ------------------ -----------
  1   ASA 5516-X with FirePOWER services, 8GE, AC,       ASA5516                   JAD194803CU
 sfr  Unknown                                                                   N/A                            JAD194803CU

 

Mod  MAC Address Range                            Hw Version      Fw Version      Sw Version
---- --------------------------------- ------------ ------------ ---------------
1      00fe.c832.04b1 to 00fe.c832.04b9      2.1                  1.1.12             9.8(1)
sfr    00fe.c832.04b0 to 00fe.c832.04b0      N/A                 N/A

 

Mod  SSM Application Name                    Status                    SSM Application Version
---- ------------------------------ ---------------- --------------------------

 

Mod  Status                        Data Plane Status            Compatibility
---- ------------------ --------------------- -------------
 1     Up Sys                       Not Applicable
sfr    Recover                     Not Applicable

I know one of the options works because I've done it myself. I just don't recall which one it is for when we get into this indeterminate state.

You've tried shutdown and uninstall so the remaining options are reset and reload. Give them a try.

SYD-ASA5516X-FW01/stby# sw-module module sfr reset

Module sfr should be shut down before resetting it or loss of configuration
may occur.

 

Module sfr cannot be reset, please stop the current recovery before trying
to reset the module.


SYD-ASA5516X-FW01/stby# sw-module module sfr reload

Reload module sfr? [confirm]

Module sfr cannot be reloaded, not in Up state.

 

No more options.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: