10-07-2021 10:47 AM
Hello,
I'm trying to migrate a Cisco Firepower FTD 1010 from FTD to ASA. I have downloaded the asa image (cisco-asa-fp1k.9.14.2.15.SPA ) when I try to upload it to the FTD, I will get a failed message when I check the show download-task details.
Model : Cisco Firepower 1010 Threat Defense (78) Version 6.4.0 (Build 102)
This error happens if I try tftp, scp, ftp, and sftp. I have even tried to download via the usb port. (system is unable to see the usb drive, it's not mounted. usb drive is formated fat32)
I have opened a case with TAC about this. I currently see there is a bug CSCvn9946, but it affects the firepower 9300 series, nothing about the 1010. but the error message is the same. any suggestions would be helpful. thanks
https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvn99461/?rfs=iqvred
File Name: cisco-asa-fp1k.9.14.2.15.SPA:69
Protocol: Tftp
Server: 192.168.1.5
Port: 0
Userid:
Path: /c/tftp-root/asa
Downloaded Image Size (KB): 0
Time stamp: 2021-10-05T19:16:51.173
State: Failed
Status: Download failure - Internal error (1)
Transfer Rate (KB/s): 0.000000
Current Task: deleting downloadable cisco-asa-fp1k.9.14.2.15.SPA:69 on local(FSM-STAGE:sam:dme:FirmwareDownloaderDownload:DeleteLocal)
Solved! Go to Solution.
10-08-2021 10:01 AM - edited 10-08-2021 10:06 AM
Ok, so I figured it out before TAC got back to me. I was able to perform the download via usb drive. Here's where the story gets interesting. I had to login to the FTD local management. from there, I did a dir, and I could see and view the usbdrive: From the previous firepower screen, I could not see the contents of the usb drive, and the download image command did not work. After I was able to see the contents of my flash drive, I went back and ran the download image usbA:/cisco-asa-fp1k.9.14.2.15.SPA. it worked. see below.
firepower(local-mgmt)# dir
<CR>
bootflash: File URI
order Order files by time
usbdrive: File URI
volatile: File URI
workspace: File URI
firepower(local-mgmt)# dir usbdrive:/
2 4096 Oct 06 17:35:30 2021 System Volume Information/
1 386850624 Oct 02 14:35:20 2021 cisco-asa-fp1k.9.14.2.15.SPA
firepower /firmware # download image usbA:/cisco-asa-fp1k.9.14.2.15.SPA
Please use the command 'show download-task' or 'show download-task detail' to check download progress.
firepower /firmware # show download-task
Download task:
File Name Protocol Server Port Userid State
--------- -------- --------------- ---------- --------------- -----
asa Tftp 192.168.1.5 0 Failed
cisco-asa-fp1k.9.14.2.15.SPA
Usb A 0 Downloading
cisco-asa-fp1k.9.14.2.15.SPA:69
Tftp 192.168.1.5 0 Failed
cisco-asa-fp1l.9.14.2.15.SPA
Tftp 192.168.1.6 0 Failed
firepower /firmware # show download-task detail
File Name: cisco-asa-fp1k.9.14.2.15.SPA
Protocol: Usb A
Server:
Port: 0
Userid:
Path:
Downloaded Image Size (KB): 377783
Time stamp: 2021-10-07T18:28:03.980
State: Downloading
Status: validating and unpacking the image
Transfer Rate (KB/s): 26984.500000
Current Task: unpacking image cisco-asa-fp1k.9.14.2.15.SPA on primary(FSM-STAGE:sam:dme:FirmwareDownloaderDownload:UnpackLocal)
ciscoasa>
10-08-2021 10:01 AM - edited 10-08-2021 10:06 AM
Ok, so I figured it out before TAC got back to me. I was able to perform the download via usb drive. Here's where the story gets interesting. I had to login to the FTD local management. from there, I did a dir, and I could see and view the usbdrive: From the previous firepower screen, I could not see the contents of the usb drive, and the download image command did not work. After I was able to see the contents of my flash drive, I went back and ran the download image usbA:/cisco-asa-fp1k.9.14.2.15.SPA. it worked. see below.
firepower(local-mgmt)# dir
<CR>
bootflash: File URI
order Order files by time
usbdrive: File URI
volatile: File URI
workspace: File URI
firepower(local-mgmt)# dir usbdrive:/
2 4096 Oct 06 17:35:30 2021 System Volume Information/
1 386850624 Oct 02 14:35:20 2021 cisco-asa-fp1k.9.14.2.15.SPA
firepower /firmware # download image usbA:/cisco-asa-fp1k.9.14.2.15.SPA
Please use the command 'show download-task' or 'show download-task detail' to check download progress.
firepower /firmware # show download-task
Download task:
File Name Protocol Server Port Userid State
--------- -------- --------------- ---------- --------------- -----
asa Tftp 192.168.1.5 0 Failed
cisco-asa-fp1k.9.14.2.15.SPA
Usb A 0 Downloading
cisco-asa-fp1k.9.14.2.15.SPA:69
Tftp 192.168.1.5 0 Failed
cisco-asa-fp1l.9.14.2.15.SPA
Tftp 192.168.1.6 0 Failed
firepower /firmware # show download-task detail
File Name: cisco-asa-fp1k.9.14.2.15.SPA
Protocol: Usb A
Server:
Port: 0
Userid:
Path:
Downloaded Image Size (KB): 377783
Time stamp: 2021-10-07T18:28:03.980
State: Downloading
Status: validating and unpacking the image
Transfer Rate (KB/s): 26984.500000
Current Task: unpacking image cisco-asa-fp1k.9.14.2.15.SPA on primary(FSM-STAGE:sam:dme:FirmwareDownloaderDownload:UnpackLocal)
ciscoasa>
09-12-2022 10:14 PM - edited 09-12-2022 10:15 PM
hi,
it seem i'm on the same predicament. is the USB file transfer the only solution given to you by TAC?
i tried both FTP and TFTP and failed half way through the file transfer.
it also seem this is a bug.
https://bst.cisco.com/bugsearch/bug/CSCvn99461
/firmware/download-task # show detail
Download task:
File Name: cisco-asa-fp2k.9.16.3.19.SPA
Protocol: Ftp
Server: 172.27.5.3
Port: 0
Userid: ftpuser
Path:
Downloaded Image Size (KB): 364183
Time stamp: 2022-09-13T04:09:34.401
State: Failed
Status: Download failure - Internal error (1)
Transfer Rate (KB/s): 183.745209
Current Task: deleting downloadable cisco-asa-fp2k.9.16.3.19.SPA on local(FSM-STAGE:sam:dme:FirmwareDownloaderDownload:DeleteLocal)
09-14-2022 06:17 PM
only USB transfer worked.
i managed to upgrade FPR 2100 ASA to 9.16
# scope firmware
/firmware # show download-task
Download task:
File Name Protocol Server Port Userid State
--------- -------- --------------- ---------- --------------- -----
bootflash:cisco-asa-fp2k.9.16.3.19.SPA
Tftp 10.1.4.8 0 Failed
cisco-asa-fp2k.9.16.3.19.SPA
Usb A 0 Downloaded
/firmware # show package
Name Package-Vers
--------------------------------------------- ------------
cisco-asa-fp2k.9.12.1.2.SPA 9.12.1.2
cisco-asa-fp2k.9.16.3.19.SPA 9.16.3.19
10-18-2022 12:43 PM
my fpr-2110 is not able to detect the usb. not from the rommon mode neither from the FXOS mode.
usb is formatted with fat-32 file system.
any suggestions?
11-07-2022 11:52 PM
https://quickview.cloudapps.cisco.com/quickview/bug/CSCvv54829 is probably the issue. I still have some old usb 2.0 usb drives which are 8 or 4 gig and they work perfectly. None of the USB 3.0 usb drives which are 16 gig or larger do work in my case :(.
12-23-2022 11:55 PM
Yea I confirmed it; Firepower only support USB 2.x media, even though:
1) The port is clearly a BLUE USB 3.x port
2) The hardware guide clearly says USB 3.x
https://www.cisco.com/c/en/us/td/docs/security/firepower/1010/hw/guide/hw-install-1010/overview.html
https://www.cisco.com/c/en/us/td/docs/security/firepower/1100/hw/guide/hw-install-1100/overview.html
~BAS
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide