cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1004
Views
0
Helpful
3
Replies

Cannot get my firepower module to communicate out

cylemmulo1
Level 1
Level 1

So to begin, Cisco ASA i'm totally new with. One of our Fortigates is dying out though, and I had this unused so i'm attempting to install it as a learning process and replacement. 

 

So I have a 5515-X. I had it setup easy enough as just a regular ASA but I got greedy and decided to try getting firepower to work. 

 

I've gotten to where I do 

Petes-ASA(config)# sw-module module sfr recover configure image disk0:/xxxxx

Petes-ASA(config)# sw-module module sfr recover boot

 

Did a setup with it being 172.16.81.1/24 and my laptop was set at .2 of the same subnet. But now I can't get the SFR to talk to anything. I try to ping each way and nothing. I am hooked into mgmt0/0 not g0/0 also. 

 

Spoiler

Hostname: asasfr
Management Interface Configuration

IPv4 Configuration: static
IP Address: 172.16.81.1
Netmask: 255.255.255.0
Gateway: 172.16.81.2

IPv6 Configuration: Stateless autoconfiguration

DNS Configuration:
DNS Server:
172.16.81.2

NTP configuration: Disabled

 

asasfr-boot>show interfaces
eth0 Link encap:Ethernet HWaddr 84:3D:C6:76:E9:4B
inet addr: 172.16.81.1 Bcast:172.16.81.255 Mask:255.255.255.0
inet6 addr: fe80::863d:c6ff:fe76:e94b/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:42 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:8988 (8.7 KiB)

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.255.255.255
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)

 

 I also tried setting up on the main console to connect g0/0 and M0/0 like one of cisco's guides shows, but those won't communicate either.

 

 

It seems fairly simple, is there a reason this interface wouldn't communicate?

3 Replies 3

Marvin Rhoads
Hall of Fame
Hall of Fame

Can you share the output of

show module sfr detail

...from the ASA cli?

 

It looks like you're still at the boot prompt meaning you haven't completed installing the module. There is a boot package that you install first to bootstrap the module and then a full image with all the rest of the module.

Yes, sorry I'm still trying to get a handle on how to word everything, but you are correct it's at the boot before I install the package. 

Continue on to install the system package per the installation guide. While you're in that interim state you won't have a full set of networking functions.

Review Cisco Networking for a $25 gift card