12-07-2010 07:31 PM - edited 03-11-2019 12:19 PM
So I tried to update the image on my 5505 and I messed it up.........bad
So how do I get it back to the default settings....
Currently looking at the console editor is see:
Launching BootLoader...
Boot configuration file contains 1 entry.
Boot mode is 1. Default entry is 1.
Loading disk0:/asa812-smp-k8.bin... Booting...
Platform ASA5505
This SMP image cannot run on a ASA5505 system.
Rebooting....
CISCO SYSTEMS
Embedded BIOS Version 1.0(12)13 08/28/08 15:50:37.45
Low Memory: 632 KB
High Memory: 507 MB
PCI Device Table.
Bus Dev Func VendID DevID Class Irq
00 01 00 1022 2080 Host Bridge
00 01 02 1022 2082 Chipset En/Decrypt 11
00 0C 00 1148 4320 Ethernet 11
00 0D 00 177D 0003 Network En/Decrypt 10
00 0F 00 1022 2090 ISA Bridge
00 0F 02 1022 2092 IDE Controller
00 0F 03 1022 2093 Audio 10
00 0F 04 1022 2094 Serial Bus 9
00 0F 05 1022 2095 Serial Bus 9
Evaluating BIOS Options ...
Launch BIOS Extension to setup ROMMON
Cisco Systems ROMMON Version (1.0(12)13) #0: Thu Aug 28 15:55:27 PDT 2008
Platform ASA5505
Ethernet0/0
MAC Address: d0d0.fd70.b698
Link is DOWN
Use ? for help.
rommon #0>
HELP.
Thanks for you help!
12-07-2010 08:04 PM
You can't run ASA version 8.1.x (asa812-smp-k8.bin) on ASA5505 as this is not compatible.
ASA version 8.1 is only for ASA5580.
Please kindly upload either version 8.0.x or 8.2.x downloaded from cisco.com software download site.
12-07-2010 08:16 PM
I have asa805 downloaded......will that work?
If so how can I upload it to the device as I am now in this rommon stuff which seems to be different than the normal command line stuff.....
Thanks.
12-07-2010 08:19 PM
12-07-2010 08:22 PM
this link doesn't appear to work......
12-07-2010 08:25 PM
This section describes how to load a software image to an adaptive security appliance from the ROM monitor mode using TFTP.
To load a software image to an adaptive security appliance, perform the following steps:
Step 1 Connect to the adaptive security appliance console port according to the instructions in "Accessing the Command-Line Interface" section on page 2-4.
Step 2 Power off the adaptive security appliance, and then power it on.
Step 3 During startup, press the Escape key when you are prompted to enter ROMMON mode.
Step 4 In ROMMOM mode, define the interface settings to the adaptive security appliance, including the IP address, TFTP server address, gateway address, software image file, and port, as follows:
rommon #1> ADDRESS=10.132.44.177
rommon #2> SERVER=10.129.0.30
rommon #3> GATEWAY=10.132.44.1
rommon #4> IMAGE=f1/asa800-232-k8.bin
rommon #5> PORT=Ethernet0/0
Ethernet0/0
Link is UP
MAC Address: 0012.d949.15b8
Note Be sure that the connection to the network already exists.
Step 5 To validate your settings, enter the set command.
rommon #6> set
ROMMON Variable Settings:
ADDRESS=10.132.44.177
SERVER=10.129.0.30
GATEWAY=10.132.44.1
PORT=Ethernet0/0
VLAN=untagged
IMAGE=f1/asa800-232-k8.bin
CONFIG=
LINKTIMEOUT=20
PKTTIMEOUT=4
RETRY=20
Step 6 Ping the TFTP server by entering the ping server command.
rommon #7> ping server
Sending 20, 100-byte ICMP Echoes to server 10.129.0.30, timeout is 4 seconds:
Success rate is 100 percent (20/20)
Step 7 Load the software image by entering the tftp command.
rommon #8> tftp
ROMMON Variable Settings:
ADDRESS=10.132.44.177
SERVER=10.129.0.30
GATEWAY=10.132.44.1
PORT=Ethernet0/0
VLAN=untagged
IMAGE=f1/asa800-232-k8.bin
CONFIG=
LINKTIMEOUT=20
PKTTIMEOUT=4
RETRY=20
tftp f1/asa800-232-k8.bin@10.129.0.30 via 10.132.44.1
Received 14450688 bytes
Launching TFTP Image...
Cisco PIX Security Appliance admin loader (3.0) #0: Mon Mar 5 16:00:07 MST 2007
Loading...
Step 8 Reload the security appliance to run the new image.
rommon #9> reload
After the software image is successfully loaded, the security appliance automatically exits ROMMOM mode.
Step 9 To verify that the correct software image has been loaded into the adaptive security appliance, check the version in the adaptive security appliance by entering the following command:
hostname> show version
12-07-2010 08:38 PM
so long as the file name that you downloaded does not contain "smp" it will load. "smp" is only for ASA5580s
not ASA5505s.
-KS
12-07-2010 08:44 PM
the file i have is asa805-k8.bin.
problem 1 - I can't seem to have any success with the ping server command.
problem 2 - I am confussed with this command?
rommon #4> IMAGE=f1/asa800-232-k8.bin
when I move on down to the actually fftp command I am concerned about where the file is save and where the device is looking for it on the server....
12-07-2010 09:24 PM
Hello Todd,
Hope you are doing fine, when you turn on the interface, say interface Eth 0/0, do you see it coming up?
Let me know.
Mike
12-07-2010 09:30 PM
Hey Mike!
Looks like it!
Platform ASA5505
Ethernet0/0
mac address: d0d0.fd70.b698
Link is UP
12-12-2010 03:44 PM
When I get to the ping server command.....
I get a 0% success rate......
The LINK is up.
I am able to ping the gateway with 100% success but I am not able to ping any other ip....
Any suggestions?
Thanks.
12-12-2010 04:28 PM
So you got the code uploaded onto the unit?
You are able to ping the GW meaning you are able to ping the closest interface on the ASA to your client but, not other IP addresses that are configured on the ASA? If so, you can only ping the closest interface to your client.
If it that you cannot ping IP address outside the ASA then, may be it is not configured for nat/global or there is no "icmp inspection" configured.
Let me know what exactly is the problem.
-KS
12-12-2010 06:01 PM
I have attached my 5505 to my desktop via patch cable. So nothing is between the asa and the desktop
I also have that same desktop connected to the asa via console mgmt port to access the cmd line prompts.
But can not ping the pc......nor can the pc ping the asa.....
12-13-2010 07:29 AM
Hello,
Does the computer has any kind of firewall configured? Seems like it.
Let us know.
Mike
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide