ASA5525

[nasser2002_2005]

can some please help me with this issue ?

asasfr-boot>system install ftp://10.30.2.40/asasfr-sys-6.2.0-362.pkg

Verifying

111
Upgrade aborted.

ASA-5525-1(config)# SH RUN BOOT

boot system disk0:/asa981-smp-k8.bin
boot system disk0:/asasfr-5500x-boot-6.2.0-2.img
boot system disk0:/asasfr-sys-6.2.0-362 

thanks

[Marvin Rhoads]

You're mixing the sfr (FirePOWER) module and ASA software commands. The "boot system" commands should not be used for the "asasfr..." images.

To show the version and status of the sfr (FirePOWER) module, you would use the "show module sfr detail" command.

The "system install" command is to install the full FirePOWER module software from the "asasfr-boot" prompt in the partially initialized module as you show.

Given that your bootstrap image was asasfr-5500x-boot-6.2.0-2.img, you should be using the system software "asasfr-sys-6.2.0-362.pkg" and then, from the GUI, upgrade it to patch 6.2.0.2.

[nasser2002_2005]

thank you for your respond,

i have new device and already update the ASA and ASDM.  and i downloaded the  FirePOWER image. Now i tired to download the pkg from asasfr mode file it shows the below massage 

Verifying

111
Upgrade aborted.

the show version command shows that i have firepower :

Firepower Extensible Operating System Version 2.2(1.47)

and i want to download 6.2.0

[Marvin Rhoads]

Please share the output of:

show module sfr detail

[nasser2002_2005]

sh module sfr details

Getting details from the Service Module, please wait...
Unable to read details from module sfr

Card Type: Unknown
Model: N/A
Hardware version: N/A
Serial Number: 
Firmware version: N/A
Software version:
MAC Address Range: 00a3.8ecf.c864 to 00a3.8ecf.c864
Data Plane Status: Not Applicable
Console session: Ready
Status: Recover

[Marvin Rhoads]

OK, we would expect that status since your module is in recovery mode.

Please confirm the MD5 checksum of the file "asasfr-sys-6.2.0-362.pkg" you downloaded against what is posted on Cisco's download page.

[nasser2002_2005]

Thank you very much .

could you please give me more detail?

this is my first project   

[Marvin Rhoads]

We need to confirm you have a good download. If you hover over the file in the cisco.com download page, you will see the checksum value. Copy it to notepad.

Then use a checksum utility like the Microsoft cli one or a downloadable graphical one to confirm you have a good copy downloaded by checking the checksum of your local file copy.

https://www.microsoft.com/en-us/download/details.aspx?id=11533

http://www.winmd5.com/

[nasser2002_2005]

Thank you .

i did your instructions and the checksum match .

I started from the beginning and i download old version which is 5.3.1 image .

when i login to SFR session to boot the pkg its shows me the same error

asasfr-boot>system install ftp://10.30.2.40/asasfr-sys-5.3.1-155.pkg
Verifying

111
Upgrade aborted.
asasfr-boot>

[Sheraz.Salim]

hi,

kindly please try this ftp://user:pass@10.30.2.40/asasfr-sys-5.3.1-152.pkg

note: user:pass    you have to define as in your ftp server

also make sure if you running a filezilla server create username and password to match them with ftp://user:pass@x.x.x.x

also please be advised, with version 9.7.x you need to run 6.x

Kind Regards,

sheraz.

[nasser2002_2005]

Thank you for your respond 

i did all step above 

this is show version 

sh version

Cisco Adaptive Security Appliance Software Version 9.8(1)
Firepower Extensible Operating System Version 2.2(1.47)
Device Manager Version 7.8(1)

and i tried to  download SFR 6.2.0 ITS give me same error

after i read the Release note for 6.2.0

its say i have ti have 6.0.0.0 version and 6.0.0 have to have 5.4.0

so i start to download the 5.3.0  

and still some issue 

[Marvin Rhoads · Accepted solution]

The references you are citing about 6.0 and 5.3 etc. are for upgrades. You are not doing an inline upgrade but instead building a new image. When re-imaging, the boot image (img file) must match the version of the system image (img file).

I don't know how you got to the initial condition. It is probably best to start over with a module uninstall:

sw-module module sfr uninstall

...and then and follow the following procedure exactly while using the version 6.2.0 files:

http://www.cisco.com/c/en/us/td/docs/security/firepower/quick_start/reimage/asa-ftd-reimage.html#id_51507

I have several such re-images and never encountered any problem.

[Marvin Rhoads]

nasser2002_2005,

Thanks for rating. Did it work for you when you restarted from the beginning? 

[nasser2002_2005]

yes, thank you :)

[Ravi Kiran]

Thanks this command at least worked for me  and its showing downloading and extracting.