Solved: Cisco ASA5550 upgrade from 7.2.5 to 8.0.x crash

emil.fung · ‎08-30-2018

I got a problem when I was upgrading ASA5550 from 7.2.5 to 8.0.x It kept crashing and reboot repeatedly. Crash log as attachment. Guys pls help me. Thanks.

# show version

Cisco Adaptive Security Appliance Software Version 7.2(5)
Device Manager Version 7.6(2)150

Compiled on Tue 11-May-10 09:31 by builders
System image file is "disk0:/asa725-k8.bin"
Config file at boot was "startup-config"

ASANET57 up 18 mins 32 secs

Hardware: ASA5550, 4096 MB RAM, CPU Pentium 4 3000 MHz
Internal ATA Compact Flash, 256MB
BIOS Flash M50FW080 @ 0xffe00000, 1024KB

Encryption hardware device : Cisco ASA-55x0 on-board accelerator (revision 0x0)
Boot microcode : CNlite-MC-Boot-Cisco-1.2
SSL/IKE microcode: CNlite-MC-IPSEC-Admin-3.03
IPSec microcode : CNlite-MC-IPSECm-MAIN-2.05
0: Ext: GigabitEthernet0/0 : address is 0021.a0af.f028, irq 9
1: Ext: GigabitEthernet0/1 : address is 0021.a0af.f029, irq 9
2: Ext: GigabitEthernet0/2 : address is 0021.a0af.f02a, irq 9
3: Ext: GigabitEthernet0/3 : address is 0021.a0af.f02b, irq 9
4: Ext: Management0/0 : address is 0021.a0af.f027, irq 11
5: Int: Internal-Data0/0 : address is 0000.0001.0002, irq 11
6: Int: Not used : irq 5
7: Ext: GigabitEthernet1/0 : address is 001b.d4ca.5f37, irq 255
8: Ext: GigabitEthernet1/1 : address is 001b.d4ca.5f38, irq 255
9: Ext: GigabitEthernet1/2 : address is 001b.d4ca.5f39, irq 255
10: Ext: GigabitEthernet1/3 : address is 001b.d4ca.5f3a, irq 255
11: Int: Internal-Data1/0 : address is 0000.0003.0002, irq 255
The Running Activation Key is not valid, using default settings:

Licensed features for this platform:
Maximum Physical Interfaces : Unlimited
Maximum VLANs : 250
Inside Hosts : Unlimited
Failover : Active/Active
VPN-DES : Enabled
VPN-3DES-AES : Disabled
Security Contexts : 2
GTP/GPRS : Disabled
VPN Peers : 5000
WebVPN Peers : 2

This platform has an ASA 5550 VPN Premium license.

Serial Number: JMX1314L2G2
Running Activation Key: 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000
Configuration register is 0x1
Configuration last modified by enable_15 at 16:11:18.610 hk Thu Aug 30 2018

Ajay Saini · ‎08-30-2018

Hello,

Only Cisco TAC has access to decoder tool and the crash info does not indicate anything specific. I would recommend that you try and go into rommon mode and upgrade to 8.0.4.x to latest interim release or to 8.2.x code to latest interim release.

FYI, per my earlier experience, 8.0.2 and 8.0.3 have some memory related bugs, so better avoid them.

Chances are that with the upgrade to interim release of 8.0.4.x , the issue will fix, provided its related to software.

Upgrade from rommon mode:

https://www.cisco.com/c/en/us/td/docs/security/asa/asa95/configuration/general/asa-95-general-config/admin-swconfig.html#ID-2152-000008e3

HTH

AJ

View solution in original post

Ajay Saini · ‎08-30-2018