11-20-2013 08:44 PM - edited 03-11-2019 08:07 PM
Hi All,
I ahve performed IOS upgrade activity from 8.2(5)26 to 8.4.6. ASA is able to load 8.4.6 but crashed after loading the IOS again and again and reloaded continuesely. Below is some of the logs observed during activity. Please help here how to mitigate this issue.
Loading disk0:/asa846-k8.bin... Booting...
Platform ASA5520
Loading...
IO memory blocks requested from bigphys 32bit: 20848
dosfsck 2.11, 12 Mar 2005, FAT32, LFN
Starting check/repair pass.
Starting verification pass.
/dev/hda1: 156 files, 27077/62462 clusters
dosfsck(/dev/hda1) returned 0
Processor memory 1862270976, Reserved memory: 99614720
Total SSMs found: 0
Total NICs found: 7
mcwa i82557 Ethernet at irq 11 MAC: 0023.3353.c29b
mcwa i82557 Ethernet at irq 5 MAC: 0000.0001.0001
i82547GI rev00 Gigabit Ethernet @ irq11 dev 1 index 05 MAC: 0000.0001.0002
i82546GB rev03 Gigabit Ethernet @ irq09 dev 2 index 03 MAC: 0023.3353.c29f
i82546GB rev03 Gigabit Ethernet @ irq09 dev 2 index 02 MAC: 0023.3353.c29e
i82546GB rev03 Gigabit Ethernet @ irq09 dev 3 index 01 MAC: 0023.3353.c29d
i82546GB rev03 Gigabit Ethernet @ irq09 dev 3 index 00 MAC: 0023.3353.c29c
---< Ommited>---
---< Ommited>---
This platform has an ASA 5520 VPN Plus license.
Cisco Adaptive Security Appliance Software Version 8.4(6)
****************************** Warning *******************************
This product contains cryptographic features and is
subject to United States and local country laws
governing, import, export, transfer, and use.
Delivery of Cisco cryptographic products does not
imply third-party authority to import, export,
distribute, or use encryption. Importers, exporters,
distributors and users are responsible for compliance
with U.S. and local country laws. By using this
product you agree to comply with applicable laws and
regulations. If you are unable to comply with U.S.
and local laws, return the enclosed items immediately.
A summary of U.S. laws governing Cisco cryptographic
products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
If you require further assistance please contact us by
sending email to export@cisco.com.
******************************* Warning *******************************
Copyright (c) 1996-2013 by Cisco Systems, Inc.
Restricted Rights Legend
Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, California 95134-1706
Reading from flash...
!!!!!!!!!!!!!!!!!!!
REAL IP MIGRATION: WARNING
In this version access-lists used in 'access-group', 'class-map',
'dynamic-filter classify-list', 'aaa match' will be migrated from
using IP address/ports as seen on interface, to their real values.
If an access-list used by these features is shared with per-user ACL
then the original access-list has to be recreated.
INFO: Note that identical IP addresses or overlapping IP ranges on
different interfaces are not detectable by automated Real IP migration.
If your deployment contains such scenarios, please verify your migrated
configuration is appropriate for those overlapping addresses/ranges.
Please also refer to the ASA 8.3 migration guide for a complete
explanation of the automated migration process.
INFO: MIGRATION - Saving the startup configuration to file
INFO: MIGRATION - Startup configuration saved to file 'flash:8_2_5_26_startup_cfg.sav'
*** Output from config line 4, "ASA Version 8.2(5)26 "
.......................................
Thread Name: pix_flash_config_thread
Page fault: Address not mapped
vector 0x0000000e
edi 0x72b66014
esi 0x72b66000
ebp 0x724e32f0
esp 0x724e30e8
ebx 0x72b66014
edx 0x00000000
ecx 0x00000001
eax 0x729a16d0
error code 0x00000006
eip 0x08af27fa
cs 0x00000073
eflags 0x00013246
CR2 0x00000000
Cisco Adaptive Security Appliance Software Version 8.4(6)
Compiled on Fri 26-Apr-13 09:00 by builders
Hardware: ASA5520
Crashinfo collected on 19:08:25.799 GMAT Tue Nov 19 2013
Traceback:
0: 0x08061c60
1: 0x08061ca1
2: 0x0806443b
3: 0x08cce700
4: 0xffffe410
5: 0x08b878ed
6: 0x08b887d1
7: 0x08ba6bff
8: 0x080e05f8
9: 0x080e0d7f
10: 0x080e1506
11: 0x080e22c4
12: 0x080e261c
13: 0x080db335
14: 0x08b2519e
15: 0x08068c4c
Stack dump: base:0x724e31f0 size:1312, active:1312
entries above '==': return PC preceded by input parameters
entries below '==': local variables followed by saved regs
'==Fn': stack frame n, contains next stack frame
'*': stack pointer at crash
For example:
0xeeeeef00: 0x005d0707 : arg3
0xeeeeeefc: 0x00000159 : arg2
0xeeeeeef8: 0x005d0722 : arg1
0xeeeeeef4: 0x005d1754 : return PC
0xeeeeeef0: 0xeeeeef20 ==F2: stack frame F2
0xeeeeeeec: 0x00def9e0 : local variable
0xeeeeeee8: 0x0187df9e : local variable or saved reg
0xeeeeeee4: 0x01191548 : local variable or saved reg
0xeeeeeee0: 0x014dde20 : local variable or saved reg
---< Ommited>---
---< Ommited>---
Begin to dump crashinfo to flash....
End of console dump.
Do 'show crashinfo' after reboot to retrieve other crash information
Process shutdown finished
Rebooting.....
Booting system, please wait...
---< Ommited>---
---< Ommited>---
11-21-2013 12:24 AM
Hi,
Your ASA is hitting this bug:
CSCuh19234: Traceback after upgrade from pre-8.3 to 8.4(6), 9.1(2) or 9.0(3)
Upgrading to 8.4(7) would resolve the crash, or as a workaround you can manually migrate the config to avoid auto-migration which is the trigger for the crash.
Hope this helps.
--
Mashal Shboul
11-21-2013 12:27 AM
Interesting...haven't seen that bug before.
Nice catch.
11-21-2013 12:24 AM
It sounds like your flash has become corrupted. I would suggest formatting the flash (I hope you have a backup of your ASA image file, config file, and license!!!)
After you have formatted the flash, upload the image and the config file to the ASA and set the boot system image. make sure you also copy the running config to the startup config
If you do not have your ASA license, here is a link that explains how to recover it from the Cisco website.
http://www.alfredtong.com/cisco/cisco-asa-license-missing/
--
Please rate all helpful posts
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide