ASA rommon mode question

[matthewatt]

If I have a firewall with no code on it and boot it into rommon mode, can I pull a code off a USB drive, or can I only do it by setting up TFTP parameters and then copying it down from TFTP server? thank you

[balaji.bandi]

You can do both the ways, simple is USB, again depends on model you have.

if you have USB its easy, TFTP you need to setup one  - but again what ever comfort level.

[matthewatt]

thanks for reply. forgot to state, the firewall is a 5515. not sure what you meant by "TFTP you need to setup one". Can I pull a code directly off a USB drive from rommon mode, or am I forced to use TFTP? can you point me to the steps to pull a code off a USB stick from rommon mode?

[balaji.bandi]

yes you can use USB and copy from ROMMON.

if want to use TFTP Follow below guide : ( i mean was you need to have TFTP running on your Laptop and image need to copied in to root folder).

https://www.networkstraining.com/using-the-rommon-to-load-a-new-image-on-cisco-asa-firewall/

[johnlloyd_13]

hi,

cisco device is a bit choosy when it comes to usb stick (it needs to be FAT formatted).

you can initially boot to an image on a usb drive/disk1: and then copy the image to flash/disk0:

see helpful link:

http://ccnpsecuritywannabe.blogspot.com/2015/06/asa-file-system-and-bootvar-command.html