ASA firmware upgrade from console - tftp error

[CSCsupport99]

Have an asa 5510, trying to upgrade the firmware via console.

I have a tftp program installed on my PC but get an error running the command, any idea what I'm doing wrong?                  

asa# copy tftp flash

Address or name of remote host [142.xx.xx.xx]?  ------------> IP of my PC

Source filename [asa912-k8.bin]?

Destination filename [asa912-k8.bin]?

Accessing tftp://142.xx.xx.xx/asa912-k8.bin...
%Error opening tftp://142.xx.xx.xx/asa912-k8.bin (No such device)

[Jouni Forss]

Hi,

Are you use the ASA has an route to the IP address of your PC?

If the ASA doesnt have a route to the host from which you are trying copy the file from this error message might be shown.

- Jouni

[CSCsupport99]

Hi,

I did think that might be a possible problem.  I don't have a route on the ASA to my PC.  Happen to know the command to add that? 

Thanks.

[Jouni Forss]

Hi,

I presume this is a new ASA just about to be configured?

In that case you should configure some of the ASA interfaces with some subnet and configure the PC to be in the same subnet and connect the PC to the configured port. Then you should be able to copy the image file from the PC to the ASA.

In the case this is some firewall in production use then you should just confirm that there is a route towards the network where your host is.

The general route configuration format is

route

Naturally you would need to replace the mentioned sections with the actual information needed.

- Jouni

[CSCsupport99]

Its a lab firewall, I'm just trying to upgrade the firmware on it. 

My PC is plugged into the console port, is it possible or necessary to add a route in that case? 

[Jouni Forss · Accepted solution]

Hi,

You really cant upload files through the Console connection. Its not a network connection.

Your PC might have an IP address configured but that would be configured in its network interface card which has nothing to do with the console cable connection.

So you will have to configure one of the ASAs network interfaces with IP address and other basic settings. Then you need to configure the PCs network interface cards settings to match the IP address/subnet configured on the ASA. Then you will have an connection between the ASA and the PC and should be able to load the software to ASA.

For example

interface Management0/0

nameif management

security-level 100

ip address 10.10.10.1 255.255.255.0

no shutdown

and the configure the PC with IP address 10.10.10.100 and mask 255.255.255.0 for example and then load the software from the PCs IP address of 10.10.10.100.

- Jouni

[CSCsupport99]

Thanks for that info, I thought software upgrades could be done from console.  I will connect through the management or one of the fa ports.

[c-drive@c-drive.com]

Well 5 years later and your information is still very valuable.

thank you for a clear and concise answer to my ? 

Can it be done,  NO..... thanks again.

took me a bit to figure out the wording for the search

but once I did and I read your reply My Hunt was complete.

Cordially