Cisco FP1010 ASA 9.14 uninstall software package / bundle (fxos)

[tom.fransen]

Hi,

I am using a Cisco FP1010 running ASA software. The ASA software on the 1010 runs on top of fxos.

I installed 3 software bundles 9.14(1), 9.14(2) and 9.15(1) (using the downgrade disk1:/<image> disk1:/<config>)

How can I manage these images?

a)  How do I remove an image (bundle) that is not used?
    It is not clear to me if I need to remove on the fxos CLI or on the ASA CLI. 

b) How can I change the active boot image without first copying image to disk0 and re-installing it?
    I managed to change it using the "boot system command disk0:/<image>.SPA 

Connecting to the fxos CLI  I do see my packages but there are no commands to delete or active an image.

firepower-1010# scope firmware
firepower-1010 /firmware # show package
Name Package-Vers
--------------------------------------------- ------------
cisco-asa-fp1k.9.14.1.SPA 9.14.1
cisco-asa-fp1k.9.14.2.SPA 9.14.2
cisco-asa-fp1k.9.15.1.1.SPA 9.15.1.1

firepower-1010 /ssa # show app

Application:
Name Version Description Author Deploy Type CSP Type Is Default App
---------- ---------- ----------- ---------- ----------- ----------- --------------
asa 9.14.1 N/A cisco Native Application No
asa 9.14.2 N/A cisco Native Application Yes
asa 9.15.1.1 N/A cisco Native Application No

Thanks for any feedback on this.

Regards,

TF

[balaji.bandi]

Follow below guide :

https://www.cisco.com/c/en/us/td/docs/security/firepower/2100/troubleshoot_fxos/b_2100_CLI_Troubleshoot/b_2100_CLI_Troubleshoot_chapter_011.html

[tom.fransen]

Thanks for the response. Your are referring to the procedure "Reimage the System with the Base Install Software Version" I guess.

I will give it a try. However I had hoped that I could remove one specific version ASA version and leave the rest untouched.

It seems that this is not possible.

[tom.fransen]

Unfortunately the procedure does not work. The erase command is not supported it seems (or at least not on the fxos version which is on the Cisco 1000 series).

firepower-1010(local-mgmt)# show version
Version: 2.8(1.134)
Startup-Vers: 2.8(1.134)

firepower-1010(local-mgmt)# erase configuration
^
% Invalid Command at '^' marker

firepower-1010(local-mgmt)# ?
cd Change current directory
clear Clear managed objects
connect Connect to Another CLI
dir Show content of dir
end Go to exec mode
exit Exit from command interpreter
ls Show content of dir
no No
ping Test network reachability
ping6 Test IPv6 network reachability
pwd Print current directory
run-script Run a script
show Show system information
ssh SSH to another system
terminal Set terminal line parameters
top Go to the top mode
traceroute Traceroute to destination
traceroute6 Traceroute to IPv6 destination

firepower-1010(local-mgmt)#

[tom.fransen · Accepted solution]

In the end I found the solution to the problem.

Packages can be deleted from the FXOS CLI when you have "admin" rights. For that you have to add the "admin" keyword when connecting the the FXOS CLI.

cisco(config)# connect fxos admin
Configuring session.
.
Connecting to FXOS.

Now the delete command is available:

firepower-1010# scope firmware
firepower-1010 /firmware # ?
acknowledge Acknowledge
delete Delete managed objects
download Download
scope Changes the current mode
show Show system information
verify Verify