5506-X ROMMON configuration

[me77]

I'm trying to reimage a 5506-X with the FTD image, unable to get basic connectivity from my laptop when using the settings described in the documentation.

My laptop is plugged directly into M1/1 with a static IP. 

The firewall is using another IP within the same subnet.

The server is setup to be the laptop (which will be used to push the image.)

This should be exactly how it is described in the documentation, I can get physical link lights, but no ability to ping.

I am seeing a flashing orange Status light when I enter ROMMON, which I'm not sure why.

rommon #0> address 172.16.1.2
rommon #1> server 172.16.1.3
rommon #2> gateway 172.16.1.3

rommon #3> netmask 255.255.255.0

[Ajay Saini]

Hello,

The config parameters looks okay, just image needs to be specified. 

https://www.cisco.com/c/en/us/td/docs/security/asa/asa95/configuration/general/asa-95-general-config/admin-swconfig.html

Is the ping enabled on the laptop, you can set the default gateway on laptop as the management ip address and try to ping from laptop to firewall. Captures on machine using wireshark can help rule out

issue.

what output do you get with 'set' command

-

HTH

AJ

[me77]

For the ASA I have

Address=192.168.1.10
Netmask=255.255.255.0

Server=192.168.1.5

Gateway=192.168.1.1

Image=ftd-boot-9.7.1.4.lfbff

On the laptop, I have

IP Address 192.168.1.5

Subnet Mask 255.255.255.0

Default Gateway 192.168.1.1

With these settings I can ping from laptop->ASA, but not the other way around.

I have also tried various combinations of default gateway on both sides (setting one side or the other, or both as 192.168.1.5 and 192.168.1.10)

It seems that pinging the ASA only works if I'm trying to ping the laptop at the same time.

[Ajay Saini · Accepted solution]

Hello,

Sometimes softwares present on laptop would block ping and tftp. Antivirus/HIPS agents/Windows firewall can block for example. If you can install wireshark software, you can take captures on NIC to see what is happening with the tftp or icmp request on the machine.

-

HTH
AJ