Cisco ASA 5506 upload firmware issue

[DW Hat]

Hello all; ASA noob here.

As subject says; I have a 5506-X running ASA 9.4.1 (3) and ASDM 7.5.2

I cannot upload a new version of the firmware, or downgrade to an older version.

Any attempt that I make, no matter how (via TFTP, ASDM Gui updater, manually copying over a different version of firmware) fails.  Using the GUI, I get an HTTP Error 500.  Using TFTP, I get this message:

Error writing disk0:/asa952-lfbff-k8.SPA (Cannot allocate memory)

Sh mem gives me this:

5506# sh mem
Free memory: 830402382 bytes (39%)
Used memory: 1344047186 bytes (61%)
------------- ------------------
Total memory: 2147483648 bytes (100%)

This is after a reboot.

However, in the usage of disk0:

5506# sh disk0:
--#-- --length-- -----date/time------ path
133 14754 Dec 06 2015 08:58:09 oldconfig_2015Dec06_1500.cfg
110 62 Dec 06 2015 08:27:20 .boot_string
11 4096 Apr 21 2015 21:05:06 log
19 4096 Dec 02 2015 10:22:10 crypto_archive
128 1132352 Nov 19 2015 13:04:26 crypto_archive/crypto_eng0_arch_1.bin
129 1132352 Nov 20 2015 15:18:54 crypto_archive/crypto_eng0_arch_2.bin
130 1132352 Nov 30 2015 14:41:14 crypto_archive/crypto_eng0_arch_3.bin
131 1132352 Dec 02 2015 10:22:10 crypto_archive/crypto_eng0_arch_4.bin
132 1132352 Nov 18 2015 09:49:02 crypto_archive/crypto_eng0_arch_5.bin
20 4096 Apr 21 2015 21:06:20 coredumpinfo
21 59 Apr 21 2015 21:06:20 coredumpinfo/coredump.cfg
114 25627616 Dec 06 2015 08:22:56 asdm-752.bin
115 41836544 Apr 21 2015 21:10:48 asasfr-5500x-boot-5.4.1-211.img
117 69475200 Jul 25 2015 16:55:12 asa941-3-lfbff-k8.SPA
118 89 Jul 28 2015 17:17:24 dap.xml

7850074112 bytes total (4484153344 bytes free)

So, color me confused.   I have enough physical space that I should be able to simply copy over the newer firmware, correct?

Thanks everyone

[Marvin Rhoads]

Yes you should be able to copy it over. I've upgraded mine to 9.5(2) without any problem.

Have you checked the MD5 checksum of your download with the one posted on the Cisco downlaod page? Sometimes a corrupted image can result in odd behavior when you try to copy it. The ASA 5506 does check the digital signature of the image as part of its validation.

Hover over the file information on the downlaod page to get the checksum.

Download page: https://software.cisco.com/download/release.html?mdfid=286283326&softwareid=280775065&os=&release=9.5.2&relind=AVAILABLE&rellifecycle=&reltype=latest&i=!pp

MD5 checksum for ASA software image asa952-lfbff-k8.SPA: 1b426dbbbe4bfc67edc0885a376c4f9b

[DW Hat]

Yep, correct MD5.  I've even downloaded multiple copies of 9.4.2, 9.5.1 and 9.5.2 just to see if I can upgrade, downgrade, or even just copy over a different version of the firmware. Even letting the built in GUI updater in ASDM it doesn't work.

[Debello81]

Can you write your configuration to flash?

copy run flash:

If not your flash is bad. I ran into this a lot with a certain shipment of 5505's a long time ago.

Wes

[DW Hat]

Hi-

Yes, I was able to do the command; file copied and saved.

[DW Hat · Accepted solution]

And here's the issue:

https://tools.cisco.com/bugsearch/bug/CSCuu88437?emailclick=CNSemail

Using the firmware that I am running...combined with jumbo frames....causes any firmware update or upload to fail.

Resolution.  Disable jumbo frames.  Reboot ASA.  Update firmware.  Reboot.  Re-enable jumbo frames. Reboot.

[Marvin Rhoads]

Thanks for letting us know the resolution - that's a tricky one.