cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
4523
Views
10
Helpful
2
Replies

Cannot image sfr module in ASA5506-X. Module stay in recovery

a80386dx25iv
Level 1
Level 1

I tried FTD and now I need revert ASA software with FirePOWER service.

ciscoasa# sh mod

Mod  Card Type                                    Model              Serial No. 
---- -------------------------------------------- ------------------ -----------
   1 ASA 5506-X with FirePOWER services, 8GE, AC, ASA5506            JAD220000MS
 sfr Unknown                                      N/A                JAD220000MS

Mod  MAC Address Range                 Hw Version   Fw Version   Sw Version     
---- --------------------------------- ------------ ------------ ---------------
   1 28ac.9e75.f24c to 28ac.9e75.0000  2.0          1.1.8        9.8(2)
 sfr 28ac.9e75.f24b to 28ac.9e75.0000  N/A          N/A          

Mod  SSM Application Name           Status           SSM Application Version
---- ------------------------------ ---------------- --------------------------

Mod  Status             Data Plane Status     Compatibility
---- ------------------ --------------------- -------------
   1 Up Sys             Not Applicable        
 sfr Recover            Not Applicable        

I flash asasfr according to this manual and it looks good

Judging by compatibility table I use correct versions ASA 9.8(2) and FirePOWER 6.2.2-81

 

asasfr-boot>system install ftp://192.168.1.1/incoming/asasfr-sys-6.2.2-81.pkg
Verifying     
Downloading     
Extracting     
Package Detail
        Description:                    Cisco ASA-SFR 6.2.2-81 System Install
        Requires reboot:                Yes 

Do you want to continue with upgrade? [y]: y
Warning: Please do not interrupt the process or turn off the system.
Doing so might leave system in unusable state.

Upgrading     
Starting upgrade process ...     
Populating new system image     

Reboot is required to complete the upgrade. Press 'Enter' to reboot the system.


Broadcast message from root (ttyS1) (Wed Jan 30 04:44:37 2019):

The system is going down for reboot NOW!
Console session with module sfr terminated.
ciscoasa#

But now sfr-module still in recovery mode as in "sh mod" from the first quote. I waited 30min and the module stays in recovery. If i try to reload or reset I have an error

 

ciscoasa# sw-module module sfr reload 
Reload module sfr? [confirm]
Module sfr cannot be reloaded, not in Up state.

ciscoasa# sw-module module sfr reset   
Module sfr should be shut down before resetting it or loss of configuration may occur.
Reset module sfr? [confirm]
Module sfr cannot be reset, please stop the current recovery before trying to reset the module.

 

Why? What do I do wrong?

 

1 Accepted Solution

Accepted Solutions

Hi,

normally, when you imaging SFR in 5506-x it is taking very long time to install due to resource limitations. use below link to se full process and approximate timing.
http://www.microsolutions.com.lk/reimage-firepower-module-in-cisco-5500-x-firewall-models/

regards,
Please rate this and mark as solution/answer, if this resolved your issue
Good luck
KB

View solution in original post

2 Replies 2

Hi,

normally, when you imaging SFR in 5506-x it is taking very long time to install due to resource limitations. use below link to se full process and approximate timing.
http://www.microsolutions.com.lk/reimage-firepower-module-in-cisco-5500-x-firewall-models/

regards,
Please rate this and mark as solution/answer, if this resolved your issue
Good luck
KB

Command debug module-boot helps me a lot. I have should wait more )

Big thanks.

Review Cisco Networking products for a $25 gift card