cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1878
Views
0
Helpful
3
Replies

ASA IOS upgradation issue from 8.2(5)26 to 8.4.6

Deben Bhattarai
Level 1
Level 1

Hi All,

I ahve performed IOS upgrade activity from 8.2(5)26 to 8.4.6.  ASA is able to load 8.4.6 but crashed after loading the IOS again and again and reloaded continuesely. Below is some of the logs observed during activity. Please help here how to mitigate this issue.

Loading disk0:/asa846-k8.bin... Booting...
Platform ASA5520

Loading...
IO memory blocks requested from bigphys 32bit: 20848
dosfsck 2.11, 12 Mar 2005, FAT32, LFN
Starting check/repair pass.
Starting verification pass.
/dev/hda1: 156 files, 27077/62462 clusters
dosfsck(/dev/hda1) returned 0
Processor memory 1862270976, Reserved memory: 99614720

Total SSMs found: 0

Total NICs found: 7
mcwa i82557 Ethernet at irq 11  MAC: 0023.3353.c29b
mcwa i82557 Ethernet at irq  5  MAC: 0000.0001.0001
i82547GI rev00 Gigabit Ethernet @ irq11 dev 1 index 05 MAC: 0000.0001.0002
i82546GB rev03 Gigabit Ethernet @ irq09 dev 2 index 03 MAC: 0023.3353.c29f
i82546GB rev03 Gigabit Ethernet @ irq09 dev 2 index 02 MAC: 0023.3353.c29e
i82546GB rev03 Gigabit Ethernet @ irq09 dev 3 index 01 MAC: 0023.3353.c29d
i82546GB rev03 Gigabit Ethernet @ irq09 dev 3 index 00 MAC: 0023.3353.c29c

---< Ommited>---

---< Ommited>---

This platform has an ASA 5520 VPN Plus license.


Cisco Adaptive Security Appliance Software Version 8.4(6)

  ****************************** Warning *******************************
  This product contains cryptographic features and is
  subject to United States and local country laws
  governing, import, export, transfer, and use.
  Delivery of Cisco cryptographic products does not
  imply third-party authority to import, export,
  distribute, or use encryption. Importers, exporters,
  distributors and users are responsible for compliance
  with U.S. and local country laws. By using this
  product you agree to comply with applicable laws and
  regulations. If you are unable to comply with U.S.
  and local laws, return the enclosed items immediately.

  A summary of U.S. laws governing Cisco cryptographic
  products may be found at:
  http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

  If you require further assistance please contact us by
  sending email to export@cisco.com.
  ******************************* Warning *******************************

Copyright (c) 1996-2013 by Cisco Systems, Inc.

                Restricted Rights Legend

Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.

                Cisco Systems, Inc.
                170 West Tasman Drive
                San Jose, California 95134-1706

Reading from flash...
!!!!!!!!!!!!!!!!!!!
REAL IP MIGRATION: WARNING
In this version access-lists used in 'access-group', 'class-map',
'dynamic-filter classify-list', 'aaa match' will be migrated from
using IP address/ports as seen on interface, to their real values.
If an access-list used by these features is shared with per-user ACL
then the original access-list has to be recreated.
INFO: Note that identical IP addresses or overlapping IP ranges on
different interfaces are not detectable by automated Real IP migration.
If your deployment contains such scenarios, please verify your migrated
configuration is appropriate for those overlapping addresses/ranges.
Please also refer to the ASA 8.3 migration guide for a complete
explanation of the automated migration process.

INFO: MIGRATION - Saving the startup configuration to file

INFO: MIGRATION - Startup configuration saved to file 'flash:8_2_5_26_startup_cfg.sav'
*** Output from config line 4, "ASA Version 8.2(5)26 "
.......................................
Thread Name: pix_flash_config_thread
Page fault: Address not mapped
    vector 0x0000000e
       edi 0x72b66014
       esi 0x72b66000
       ebp 0x724e32f0
       esp 0x724e30e8
       ebx 0x72b66014
       edx 0x00000000
       ecx 0x00000001
       eax 0x729a16d0
error code 0x00000006
       eip 0x08af27fa
        cs 0x00000073
    eflags 0x00013246
       CR2 0x00000000

Cisco Adaptive Security Appliance Software Version 8.4(6)

Compiled on Fri 26-Apr-13 09:00 by builders
Hardware:   ASA5520
Crashinfo collected on 19:08:25.799 GMAT Tue Nov 19 2013

Traceback:
0: 0x08061c60
1: 0x08061ca1
2: 0x0806443b
3: 0x08cce700
4: 0xffffe410
5: 0x08b878ed
6: 0x08b887d1
7: 0x08ba6bff
8: 0x080e05f8
9: 0x080e0d7f
10: 0x080e1506
11: 0x080e22c4
12: 0x080e261c
13: 0x080db335
14: 0x08b2519e
15: 0x08068c4c
Stack dump: base:0x724e31f0 size:1312, active:1312
entries above '==': return PC preceded by input parameters
entries below '==': local variables followed by saved regs
             '==Fn': stack frame n, contains next stack frame
                '*': stack pointer at crash
For example:
    0xeeeeef00: 0x005d0707     : arg3
    0xeeeeeefc: 0x00000159     : arg2
    0xeeeeeef8: 0x005d0722     : arg1
    0xeeeeeef4: 0x005d1754     : return PC
    0xeeeeeef0: 0xeeeeef20 ==F2: stack frame F2
    0xeeeeeeec: 0x00def9e0     : local variable
    0xeeeeeee8: 0x0187df9e     : local variable or saved reg
    0xeeeeeee4: 0x01191548     : local variable or saved reg
    0xeeeeeee0: 0x014dde20     : local variable or saved reg

---< Ommited>---

---< Ommited>---


Begin to dump crashinfo to flash....

End of console dump.
Do 'show crashinfo' after reboot to retrieve other crash information
Process shutdown finished
Rebooting.....


Booting system, please wait...

---< Ommited>---

---< Ommited>---

3 Replies 3

malshbou
Level 1
Level 1

Hi,

Your ASA is  hitting this bug:

CSCuh19234:  Traceback after upgrade from pre-8.3 to 8.4(6), 9.1(2) or 9.0(3)

Upgrading to  8.4(7) would resolve the crash, or as a workaround you can manually migrate the config to avoid auto-migration which is the trigger for the crash.

Hope this helps.

--
Mashal Shboul

------------------ Mashal Shboul

Interesting...haven't seen that bug before.

Nice catch.

--
Please remember to select a correct answer and rate helpful posts

It sounds like your flash has become corrupted.  I would suggest formatting the flash (I hope you have a backup of your ASA image file, config file, and license!!!)

After you have formatted the flash, upload the image and the config file to the ASA and set the boot system image.  make sure you also copy the running config to the startup config

If you do not have your ASA license, here is a link that explains how to recover it from the Cisco website.

http://www.alfredtong.com/cisco/cisco-asa-license-missing/

--

Please rate all helpful posts

--
Please remember to select a correct answer and rate helpful posts
Review Cisco Networking for a $25 gift card