Re: AIP-SSM-10 recovery failure

krish-cisco · ‎03-19-2011

Hi all,

I am having problem during re-imaging of AIP-SSM-10.Following are the details----

ciscoasa# show module 1

Mod Card Type Model Serial No.
--- -------------------------------------------- ------------------ -----------
1 ASA 5500 Series Security Services Module-10 ASA-SSM-10 JAF1203BLPC

Mod MAC Address Range Hw Version Fw Version Sw Version
--- --------------------------------- ------------ ------------ ---------------
1 001e.7a81.8914 to 001e.7a81.8914 1.0 1.0(11)2

Mod SSM Application Name Status SSM Application Version
--- ------------------------------ ---------------- --------------------------

Mod Status Data Plane Status Compatibility
--- ------------------ --------------------- -------------
1 Recover Not Applicable
=======================================================================

ciscoasa# show module 1 details
Getting details from the Service Module, please wait...
Unable to read details from slot 1
ASA 5500 Series Security Services Module-10
Model:              ASA-SSM-10
Hardware version:   1.0
Serial Number:      JAF1203BLPC
Firmware version:   1.0(11)2
Software version:
MAC Address Range: 001e.7a81.8914 to 001e.7a81.8914
Data plane Status: Not Applicable
Status:             Recover

======================================================================

ciscoasa# show module 1 rec
ciscoasa# show module 1 recover
Module 1 recover parameters...
Boot Recovery Image: Yes
Image URL:           tftp://192.168.1.2/IPS-SSM-K9-sys-1.1-a-7.0-2-E4.img
Port IP Address:     192.168.1.3
Gateway IP Address: 0.0.0.0
VLAN ID:             0

-----------------------------------------------------------------------------------------------------------------------------------------------

After issuing the hw-module module 1 recover boot command the card is restarting and the status led is showing amber color.

Can anyone help me regarding the issue.

Thanks

Jennifer Halim · ‎03-20-2011

Are you seeing any activity on the TFTP server itself? Is it pushing the file towards the AIP module?

If not, please check that you have connectivity and also make sure that TFTP connection inbound to the TFTP server is allowed.

Also try to configure the Gateway IP Address as the TFTP server ip address.

Hope that helps.

krish-cisco · ‎03-20-2011

Hi Jenni,

I tried according to your suggested steps several times.

But not seeing any activity on the TFTP server.

Thanks

Jennifer Halim · ‎03-20-2011

Do you happen to have any personal firewall, etc on the host where your tftp server is that might be preventing the access?

How is the module management port connected to the tftp server?

krish-cisco · ‎03-20-2011

Yes I do have a personal firewall and the tftp server is installed on my laptop.

AIP-SSM is directly connected with the NIC of my laptop using cross cable.

But before transfering I disabled my firewall.

Thanks

Jennifer Halim · ‎03-20-2011

Can you please try with straight through cable and see if it makes any difference?

krish-cisco · ‎03-20-2011

also tried with that but the result is same.

Thanks for your help.

Jennifer Halim · ‎03-20-2011

Just want to confirm that you have tested the TFTP server with another network device, and it is working fine.

If you have tested the TFTP server with another device, and it works just fine, then I would RMA the module as there doesn't seem to be anything else that can be done at this stage.

krish-cisco · ‎03-21-2011

My TFTP server is working fine.

And I am also thinking of claiming RMA.

Thanks again for helping me Jenni.