ASA image upload causes firewall reboot

[krishnadig]

Hi,

I have ASA 5510 firewalls in Active/Standby, and need to perform OS upgrade on it. 

Able to upload the image (.bin) file on Active firewall; however when I upload it on to the Standby firewall (and approx 80% is transferred), it reloads.Strange! 

Copying methods used are failover exec mate copy & tftp transfer from console.

Current version OS 8.3(2) & Upgrade to 8.4(7.30)

Please help.

Thanks,

Krishna

[Marius Gunnerud]

Are there any crashdumps created from the reload?

Have you confirmed that there is enough in ASA flash to store both images?  Ok, given it should not reload the ASA if there is not enough room...but worth a check.

You could try running a fsck disk0:  (or whichever filesystem the ASA is using). and then try uploading the image again.

Also, have you tried uploading the image via the ASDM? same result?

--

Please remember to select a correct answer and rate helpful posts

[krishnadig]

Hi Marius,

No crashdump / crashinfo.

191 Mb free of 255 Mb flash

I will try fsck. Also, didnt check uploading via ASDM; however does it differ?

Thx,

Krishna

[Aditya Ganjoo]

Hi,

Did you verify the checksum of the image ?

Is it happening for every image ?

Also can you share the output of show blocks and show process on ASA ?

Regards,

Aditya

Please rate helpful posts.

[krishnadig]

Hi Aditya,

Checksum is good, I have used the same image to upgrade the primary box. Issue uploading on the standby box in HA pair. I didnt try different image.

Outputs:

sho processes

PC SP STATE Runtime SBASE Stack Process
Lwe 0805510c 4c6a5ba4 09fbeed8 0 4c6a3ca0 7544/8192 block_diag
Mrd 081beaa4 4c6d5a14 09fbe438 978852 4c6b5bd0 122412/131072 Dispatch Unit
Mwe 083db1f5 4cafca7c 09fbde4c 0 4cafac38 7480/8192 CF OIR
Mwe 08af0670 4cafeca4 09ececb0 0 4cafcdc0 7872/8192 lina_int
Mwe 08068bc6 4cb5f794 09fbde4c 0 4cb5d8f0 7576/8192 Reload Control Thread
Mwe 08070976 4cb6a71c 09fc07f8 0 4cb66b68 12496/16384 aaa
Mwe 08d094ed 4d4a7d2c 09fbde4c 1 4cb6acf0 6872/8192 UserFromCert Thread
Mwe 080a49f6 4cb73784 09fc0854 0 4cb6f890 15712/16384 CMGR Server Process
Mwe 080a4f05 4cb758ac 09fbde4c 0 4cb73a18 7760/8192 CMGR Timer Process
Lwe 081bdecc 4cb8040c 09fceba8 0 4cb7e508 7216/8192 dbgtrace
Msi 0846fd1c 4cb88b8c 09fbde4c 1877 4cb86c78 7808/8192 557mcfix
Msi 0846fb3e 4cb8ad14 09fbde4c 0 4cb88e00 7776/8192 557statspoll
Msi 0861af45 4cba51b4 09fbde4c 847 4cba32d0 7760/8192 MUS Timeout Check Thread
Mwe 08d094ed 4cecef6c 09fbde4c 0 4cbabb60 7016/8192 netfs_thread_init
Mwe 09378625 4cbb9f5c 09fbde4c 0 4cbb8108 7612/8192 Chunk Manager
Msi 0894d40e 4cbbc70c 09fbde4c 4112 4cbba828 7560/8192 PIX Garbage Collector
Mwe 08932ea4 4cbcea2c 09ebdb4c 0 4cbccb28 7904/8192 IP Address Assign
Mwe 08b41146 4cd649dc 09f02838 0 4cd62ad8 7904/8192 QoS Support Module
Mwe 089c501f 4cd66ba4 09ebebd0 0 4cd64ca0 7904/8192 Client Update Task
Lwe 093c1dba 4cd6b504 09fbde4c 205660 4cd67670 14396/16384 Checkheaps
Mwe 08b44e65 4cd7396c 09fbde4c 0 4cd6fcf8 14832/16384 Quack process
Mwe 08b9e1f2 4cd7bcf4 09fbde4c 264 4cd73e80 31888/32768 Session Manager
Mwe 08cb45b5 4cd81be4 53736628 4 4cd7e190 14312/16384 uauth
Mwe 08c52475 4cd8421c 09f0f884 0 4cd82318 7376/8192 Uauth_Proxy
Msp 08c893ce 4cd8a6b4 09fbde4c 516 4cd887b0 7792/8192 SSL
Mwe 08cb1f46 4cd8c81c 09f15434 0 4cd8a938 7272/8192 SMTP
Mwe 08caac96 4cd909a4 09f15398 251890 4cd8cac0 10480/16384 Logger
Mwe 08cab4c5 4cd92abc 09fbde4c 0 4cd90c48 7728/8192 Syslog Retry Thread
Mwe 08ca511e 4cd94c64 09fbde4c 0 4cd92dd0 7192/8192 Thread Logger
Mwe 08e9c492 4cdbf46c 09f492e8 0 4cdbd588 7040/8192 vpnlb_thread
Mwe 0828914d 4ceb5a24 09fbde4c 0 4ceb3ba0 7660/8192 TLS Proxy Inspector
Msi 08bb84c3 4cf4101c 09fbde4c 2906 4cf3f118 7792/8192 emweb/cifs_timer
Mwe 086eb117 4cf93d5c 09eb20b4 0 4cf91e68 7432/8192 netfs_mount_handler
Msi 08573218 4cb869c4 09fbde4c 8672 4cb84af0 7008/8192 arp_timer
Mwe 0857cdfc 4cb8ce3c 09fe40c8 0 4cb8af88 7824/8192 arp_forward_thread
Mwe 08cb7591 4cbb7e74 09f156c0 0 4cbb5f80 7776/8192 tcp_fast
Mwe 08cba6f0 4cba733c 09f156c0 0 4cba5458 7760/8192 tcp_slow
Mwe 08ce6059 4cba937c 09f1d628 0 4cba7488 7872/8192 udp_timer
Mwe 08121d9f 4d7093c4 4cba0e40 3 4d705520 15656/16384 IPsec message handler
Msi 0813883c 4d70d3f4 09fbde4c 62635 4d709550 14040/16384 CTM message handler
Mwe 085efabf 4d50abe4 09fe8f60 104 4d508d10 3460/8192 Lic TMR
Mwe 085ef785 4d7ab8dc 09eafb7c 197 4d7a99e8 7872/8192 Lic HA
Mwe 08107f08 4cdc58b4 09fbde4c 0 4cdc3a20 7760/8192 CTCP Timer process
Mwe 08e4a4a3 4cdc78c4 09fbde4c 0 4cdc5a50 7728/8192 L2TP data daemon
Mwe 08e4b273 4e74fe34 09fbde4c 0 4e74dfb0 7744/8192 L2TP mgmt daemon
Mwe 08e37058 4e787f84 09f42ee4 661 4e7840d0 16028/16384 ppp_timer_thread
Msi 08e9c967 4e789fd4 09fbde4c 4234 4e788100 7744/8192 vpnlb_timer_thread
Mwe 081a615f 4ea299dc 09e5ce28 14031 4ea09bb8 119400/131072 tmatch compile thread
Mwe 08b71158 5364f76c 09fbde4c 0 5364d8c8 7776/8192 ICMP event handler
Mwe 08e060e4 536518f4 09fbde4c 0 5364fa50 7776/8192 Dynamic Filter VC Housekeeper
Mwe 088955c3 53666164 09fbde4c 9123 536622c0 13924/16384 IP Background
Mwe 08a7ab95 53806adc 09fbde4c 0 53802c28 15900/16384 Crypto PKI RECV
Mwe 08a7e37a 5380c84c 09fbde4c 0 538089b8 15868/16384 Crypto CA
Mwe 08ab4e73 538109e4 09fbde4c 0 5380cb40 15884/16384 CERT API
Lsi 0895f588 4cdb4ccc 09fbde4c 76 4cdb2db8 7808/8192 uauth_urlb clean
Lwe 08939c3f 5387893c 09fbde4c 8594 53876ac8 3284/8192 pm_timer_thread
Mwe 084f1ba5 5387a98c 09fbde4c 10178 53878af8 7692/8192 IKE Timekeeper
Mwe 084e13ed 53880d3c 09eac1d8 3337 5387d168 12184/16384 IKE Daemon
Mwe 08c6585b 53884814 09f13f94 0 53882930 7872/8192 RADIUS Proxy Event Daemon
Mwe 08c331eb 53886704 4cd6cad8 5 53884960 6792/8192 RADIUS Proxy Listener
Mwe 08c64457 53888824 09fbde4c 0 53886990 7760/8192 RADIUS Proxy Time Keeper
Mwe 085639ac 5388b544 09fe4048 0 53889700 7024/8192 Integrity FW Task
M* 088fb2b5 dd498f48 09fbe438 2106 538e63a8 121732/131072 ci/console
Mwe 08415d95 539083c4 09fbde4c 1 53906530 3872/8192 fover_thread
Mwe 08e1efd5 5390a54c 0a185d90 3720 539086b8 5072/8192 lu_ctl
Msi 0897f97c 5390c754 09fbde4c 40759 5390a840 6632/8192 update_cpu_usage
Msi 08978dfc 5390e8cc 09fbde4c 6 5390c9c8 7792/8192 health_check
Msi 0897ac7a 53918b64 09fbde4c 0 53916d40 5112/8192 NIC status poll
Mwe 084034cc 53920f7c 09fd6440 11539 5391f1d8 3720/8192 fover_rx
Mwe 083fef43 539230bc 09fd6e14 8595 53921208 6080/8192 fover_tx
Mwe 0840e320 5392507c 09fe4728 14573 53923238 5840/8192 fover_ip
Mwe 08416911 53928f4c 09fd6e28 0 53925268 15552/16384 fover_rep
Mwe 0840d811 53930e4c 09fd6e30 25176 53929298 20792/32768 fover_parse
Mwe 083ee28e 5393316c 09fd5ed8 0 539312c8 5628/8192 fover_ifc_test
Mwe 083f1825 5393718c 09fbde4c 256229 539332f8 11408/16384 fover_health_monitoring_thread
Mwe 08429237 5393d744 09fbde4c 1635 5393b8b0 2656/8192 ha_trans_ctl_tx
Mwe 08429237 539618fc 09fbde4c 1921 5395fa68 2672/8192 ha_trans_data_tx
Mwe 08420b07 53969a94 09fbde4c 1 53961bf0 29932/32768 fover_FSM_thread
Mwe 08e1e663 5396cc0c 09fe4188 73175 5396ad08 5444/8192 lu_rx
Lwe 08e1e52c 5396eda4 0a185c40 0 5396ce90 7920/8192 lu_dynamic_sync
Mwe 08beac2b 53972934 09f070e4 5 53970a40 7208/8192 SNMP Notify Thread
Mwe 08d094ed 539efa0c 09fbde4c 165 53972a70 24816/32768 rtcli async executor process
Mwe 0856e716 53c05234 09fe4794 84640 53bfd360 30572/32768 IP Thread
Mwe 0857518e 53c07284 09fe4148 62221 53c05390 4824/8192 ARP Thread
Mwe 084757c0 53bae734 09fe4780 241 53bac8f0 4592/8192 icmp_thread
Mwe 08ce70d6 53bb090c 09fbde4c 47 53baea78 7512/8192 udp_thread
Mwe 08cbc6cc 53bb2954 09fe479c 1293 53bb0c00 6168/8192 tcp_thread
Mwe 08cc6673 53c8630c 09fbde4c 0 53c84478 7676/8192 npshim_thread
Mwe 08c331eb 53ce491c 4cb806a0 5 53ce2bb8 7208/8192 EAPoUDP-sock
Mwe 081fb555 53ce68a4 09fbde4c 0 53ce4d40 6376/8192 EAPoUDP
Mwe 08ce6108 54c51bf4 4d6c1e2c 4 54c50000 7048/8192 snmp
Mwe 08c331eb 54c6ebe4 54ce28d8 10 54c6cee0 5704/8192 IKE Receiver
Mwe 081dd401 54cf5a04 09fbde4c 66 54cf3b60 7712/8192 DHCPD Timer
Mwe 081defde 54cfe7e4 09fbde4c 0 54cfa9a0 15224/16384 dhcp_daemon
Mwe 08e7c03d 54f695cc 09f49018 9690 54f616d8 28116/32768 vpnfol_thread_msg
Msi 08e829b2 54f6b5ec 09fbde4c 4856 54f69708 7760/8192 vpnfol_thread_timer
Mwe 08e80ba2 54f6d5cc 09f49180 0 54f6b738 7792/8192 vpnfol_thread_sync
Msi 08e824dc 54f6f64c 09fbde4c 23747 54f6d768 7760/8192 vpnfol_thread_unsent
Mwe 0855fd18 4cdbb10c 09fbde4c 0 4cdb9278 7760/8192 Integrity Fw Timer Thread
Mwe 08cc7794 555ae954 555a7538 0 555acba0 7568/8192 listen/ssh
Mwe 08828b53 555bce9c 09fbde4c 8329 555bb008 2464/8192 NTP
Msi 086eb1fc 54fd964c 09fbde4c 179 54fd7768 7756/8192 netfs_vnode_reclaim
- - - - 0 - - DATAPATH-0-559
- - - - 883345218 - - scheduler
- - - - 885557113 - - total elapsed

sho blocks
SIZE MAX LOW CNT
0 700 698 700
4 100 99 99
80 400 376 400
256 4172 4115 4172
1550 7211 6872 6953
2048 100 100 100
2560 164 164 164
4096 100 100 100
8192 100 100 100
16384 102 102 102
65536 16 16 16

[Aditya Ganjoo]

Hi,

Could you please try a different image and test ?

Regards,

Aditya