ASA 5505 ROMMON after erase flash

[siriussystems]

I was trying to erase some bad test configs on my 5505 with a write erase, but all VLAN and Ethernet configs remained.  I hastily decided to do an erase flash.  No I'm stuck at a ROMMON prompt with no image found to boot I'm hoping I don't have to TFTP a factory image.  How do I find the images on disk0 and copy them?

[Julio Carvajal]

Hello Armand,

You already erased the flash so your disk:0 is completely blank, I am afraid the TFTP server will need to be setup in order to have the ASA back up and running,

Let me know if you need a document to proceed with the rommom procesure to upload the image via TFTP

Hope I could help,

Regards,

Julio

[siriussystems]

Julio,

Thank you for the reply.  So is the Flash = Disk.  Should I have erased the disk?  I'm not well versed on the architecture of the ASA 5500's

If you have some instructions on hand that may be helpful.  I probably need more assistance finding the correct .bin/image than setting up TFTP as I 've seen TFTP instructions in other threads and have done it a few times myself.

Thanks again.

[siriussystems]

I was able to restore asa844-1-k8.bin, but I still have my configs.  I want to erase them.  I tried write erase but it returns to my old configs.  So I did (config#)> config factory-defaults and that seemded to restore to defaults, but then when I reloaded it returned to ROMMON and I keep having to tftp the image.

How do I save the image?

[Julio Carvajal]

Hello Armand,

Okay so it looks you did not format the flash at the beginning as you still have it on your Flash.

Now how to delete the configuration and then boot up with the right image:

1- clear configure all

2- sh flash ( and copy the ios image name and ASDM image)

3- boot system flash:asa841.bin ( set the ASA image for the next time the box boots)

4- asdm image flash:asdm.bin ( set the ASDM image next time it boots)

5- write terminal

Then you are ready to reload,

Regards,

Julio

[siriussystems]

Julio,

Thanks again.  Unfortunately I'm a little lost.  I keep having to tftpdnld the bin image.  Can you give me line by line?  I need to load the a844-1-k8.bin and the asdm649.bin as apparently this had been wiped as well.

This is all I have in my flash

ciscoasa# dir flash:

Directory of disk0:/

2      drwx  2048         08:49:38 Jun 05 2009  log
5      drwx  2048         08:49:54 Jun 05 2009  crypto_archive
76     -rwx  0            08:50:04 Jun 05 2009  nat_ident_migrate
83     -rwx  2719         08:50:04 Jun 05 2009  8_0_4_0_startup_cfg.sav
10     drwx  2048         08:50:06 Jun 05 2009  coredumpinfo
84     -rwx  1360         08:50:06 Jun 05 2009  upgrade_startup_errors_200906050850.log

127266816 bytes total (126963712 bytes free)
ciscoasa#

Now that I'm running the downloaded image, can you give me the steps to copy to flash and tell me how to get the ASDM copied whether in ROMMON or via currently running default image.

[siriussystems]

I think I got it.  I just did copy tftp: flash: and see the files are finally on the disk.  Now that I have these, do I need to issue a command to ensure they are the boot images, or does this not help me?

ciscoasa# dir flash:

Directory of disk0:/

2      drwx  2048         08:49:38 Jun 05 2009  log
5      drwx  2048         08:49:54 Jun 05 2009  crypto_archive
76     -rwx  0            08:50:04 Jun 05 2009  nat_ident_migrate
83     -rwx  2719         08:50:04 Jun 05 2009  8_0_4_0_startup_cfg.sav
10     drwx  2048         08:50:06 Jun 05 2009  coredumpinfo
84     -rwx  1360         08:50:06 Jun 05 2009  upgrade_startup_errors_200906050850.log
85     -rwx  18927088     11:00:07 Jun 05 2009  asdm-649.bin
87     -rwx  25214976     11:01:13 Jun 05 2009  asa844-1-k8.bin

127266816 bytes total (82821120 bytes free)

[Julio Carvajal]

Hello Armand,

You did not follow my explanation on my previous post right

That is where the answer is,

Here you go again

3- boot system flash:asa844-1-k8.bin     ( set the ASA image for the next time the box boots)

4- asdm image flash:asdm-649.bin     ( set the ASDM image next time it boots)

5- write terminal

Then you are ready to reload,

Remember to rate all of my answers, for the community that is as important as a thanks

[siriussystems]

I followed it except I didn't have the images loaded to the disk. I know , but I figured that out and now tried as you suggested:

ciscoasa# conf term

ciscoasa(config)# boot system flash:asa844-1-k8.bin

INFO: Converting flash:asa844-1-k8.bin to disk0:/asa844-1-k8.bin

ciscoasa(config)# asdm image flash:asdm-649.bin

ciscoasa(config)# write terminal

: Saved

:

ASA Version 8.4(4)1

But after reload I got ROMMON again.

ciscoasa(config)# reload
System config has been modified. Save? [Y]es/[N]o:
Cryptochecksum: 49578e0e 5ea3e7c7 82340440 74db0189

2581 bytes copied in 1.280 secs (2581 bytes/sec)
Proceed with reload? [confirm]
ciscoasa(config)#

***
*** --- START GRACEFUL SHUTDOWN ---
Shutting down isakmp
Shutting down webvpn
Shutting down File system

***
*** --- SHUTDOWN NOW ---
Process shutdown finished
Rebooting.....

CISCO SYSTEMS
Embedded BIOS Version 1.0(12)13 08/28/08 15:50:37.45

Low Memory: 632 KB
High Memory: 251 MB
PCI Device Table.
Bus Dev Func VendID DevID Class Irq
00 01 00 1022 2080 Host Bridge
00 01 02 1022 2082 Chipset En/Decrypt 11
00 0C 00 1148 4320 Ethernet 11
00 0D 00 177D 0003 Network En/Decrypt 10
00 0F 00 1022 2090 ISA Bridge
00 0F 02 1022 2092 IDE Controller
00 0F 03 1022 2093 Audio 10
00 0F 04 1022 2094 Serial Bus 9
00 0F 05 1022 2095 Serial Bus 9

Evaluating BIOS Options ...
Launch BIOS Extension to setup ROMMON

Cisco Systems ROMMON Version (1.0(12)13) #0: Thu Aug 28 15:55:27 PDT 2008

Platform ASA5505
Ethernet0/0
MAC Address: 0025.8451.627e
Link is UP

Use ? for help.
rommon #0>

I did a boot and it seems to be loading the image asa844-1-k8.bin

Is there another command I need to make it stick on next reload or reboot.

I'm setting up via ASDM now.

[Julio Carvajal]

Yes, it is.

Do the following

confreg 0x41

Regards

Julio

[siriussystems]

Sadly this reset my device. I also had some trouble figuring out that you need to run confreg in ROMMON mode.

Now it seems I'm no longer booting to ROMMON, but I'm rebooting to blank settings, so I have to run conf factory-defaults every time in order to get ASDM to run.  After a few times of this I'm at least restoring my config via ASDM.

I've done a write mem and saved to Flash in the ASDM, but I must be missing something.  Do I need to copy running config to startup config or something?

[Julio Carvajal]

Hello,

The confreg should have been run over the normal mode not on rommom mode.

Good to know is no longer on Rommom mode, you should have the incorrect configuration-register that is why you are not booting on rommom anymore.

Why don't you copy the startup-configuration to the nvram ( running-config)??

If you already have your configuration just save it ( Write mem).

Before rebooting again:

1- With a show version check the configuration-register

2- with the command show run boot system : check the image you will boot nex time

[siriussystems]

I must be confused by what you meant.  Confreg doesn't run in normal mode or configure terminal mode.  I'm not in Rommon mode anymore but I've reloaded many times and it keeps reverting to base config.  I have to configure factory-default.

Now I've done a number of things and I'm about to reboot, but I wanted to post my actions incase you can reply while I may have to tediously reconfigure the ASA for the 15th time.

So far in CLI I have copied running-config to nvram.  I also copied running-config to startup-config.

In ASDM I used the File Manager to copy the running-config.cfg to a new file startup-config.cfg.  Also in File Manager exists an nvram file.

When I executed show version the image file is asa844-1-k8.bin and Config file at boot was "startup-config" and the Configuration register is 0x41

When I executed show run boot system and show run boot config nothing was returned. Does that mean this setting is missing and needs to be added?

I'm reloading now.  Hoping I report success, or I find another helpful tip from you.

[siriussystems]

I reloaded with reload save-config  this time and I still got basic configurations and had to load factory-default and restore my backed up config.

Must be missing something hard core here.

[Julio Carvajal · Accepted solution]

Hello Armand,

Okay do the following:

Get into the configuration terminal mode and change the config-register

asa(config)#config-register 0x01

Then, save the configuration! reload and let me know

Regards,

Julio