09-11-2018 02:06 PM - edited 02-21-2020 08:13 AM
So to begin, Cisco ASA i'm totally new with. One of our Fortigates is dying out though, and I had this unused so i'm attempting to install it as a learning process and replacement.
So I have a 5515-X. I had it setup easy enough as just a regular ASA but I got greedy and decided to try getting firepower to work.
I've gotten to where I do
Petes-ASA(config)# sw-module module sfr recover configure image disk0:/xxxxx
Petes-ASA(config)# sw-module module sfr recover boot
Did a setup with it being 172.16.81.1/24 and my laptop was set at .2 of the same subnet. But now I can't get the SFR to talk to anything. I try to ping each way and nothing. I am hooked into mgmt0/0 not g0/0 also.
Hostname: asasfr
Management Interface Configuration
IPv4 Configuration: static
IP Address: 172.16.81.1
Netmask: 255.255.255.0
Gateway: 172.16.81.2
IPv6 Configuration: Stateless autoconfiguration
DNS Configuration:
DNS Server:
172.16.81.2
NTP configuration: Disabled
asasfr-boot>show interfaces
eth0 Link encap:Ethernet HWaddr 84:3D:C6:76:E9:4B
inet addr: 172.16.81.1 Bcast:172.16.81.255 Mask:255.255.255.0
inet6 addr: fe80::863d:c6ff:fe76:e94b/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:42 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:8988 (8.7 KiB)
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.255.255.255
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
I also tried setting up on the main console to connect g0/0 and M0/0 like one of cisco's guides shows, but those won't communicate either.
It seems fairly simple, is there a reason this interface wouldn't communicate?
09-11-2018 08:13 PM - edited 09-11-2018 08:14 PM
Can you share the output of
show module sfr detail
...from the ASA cli?
It looks like you're still at the boot prompt meaning you haven't completed installing the module. There is a boot package that you install first to bootstrap the module and then a full image with all the rest of the module.
09-12-2018 05:41 AM
Yes, sorry I'm still trying to get a handle on how to word everything, but you are correct it's at the boot before I install the package.
09-12-2018 09:18 AM
Continue on to install the system package per the installation guide. While you're in that interim state you won't have a full set of networking functions.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide