Firepower 2130 - Factory Reset

[Ozan1]

How do you go from appliance mode back to platform mode? We are trying to convert our Firepower 2100 to running FTD.

We've tried booting in rommon and applying factory-reset and boot, it goes back to loading the ASA in appliance mode. 

These commands are not available in FXOS after the device is in Appliance Mode.

connect local-mgmt

erase configuration

[balaji.bandi]

Firepower 2100 in Appliance Mode fails to boot into ASA, it will boot into FXOS failsafe mode. In this mode, FXOS allows minimal configuration to allow diagnosis and recovery of the system

follow below guide :

https://www.cisco.com/c/en/us/td/docs/security/asa/fxos/troubleshoot/asa-fxos-troubleshoot/system_recovery.html#id_119397

[Milos_Jovanovic]

Hi @Ozan1,

If you want to convert your existing FPR2130 which is currently running ASA appliance mode, then you need to follow the this guide on reimaging ASA to FTD.

BR,

Milos

[Ilkin · Accepted solution]

In version 9.13+ FPR2100 reimage results in appliance mode. The correct way to convert to the platform mode is as follows:

1. Log in to the ASA in the appliance mode with the admin user and run "no fxos mode appliance".

2. write memory and reload.

After restart, this results in a default configuration in platform mode, i.e. all config is lost. 

[Ozan1]

Thank you Ilkin. This worked. Do you recommend any books on FTD deployment? I bought Nazmul's Cisco Firepower Threat Defense book, but that is mainly showing deployment in various platforms and not the actual FTD policies, etc.

The CCNP 300-710 book is due in February 2022. Thanks again.

[Abhishek3010]

If you are using FPR2130 and running ASA on it and want to revet back to the FTD and having issues, Please follow the below steps:

NOTE: The FXOS mode is Appliance when running ASA image.

1. Connect to ASA CLI
2. Go to global configuration (config terminal)
3. run "no fxos mode appliance".
4. Wr Mem.
5. reload

After restart you will land on FXOS CLI with Platform Mode. Now you can follow beloe steps to erase the current configuration and set it to default FTD.

Follow these steps on FXOX CLI:

firepower-2130# scope firmware
firepower-2130 /firmware # scope auto-install
firepower-2130 /firmware/auto-install # ex
firepower-2130 /firmware # show package
Name Package-Vers
--------------------------------------------- ------------
cisco-asa-fp2k.9.18.4.29.SPA 7.9.4
cisco-asa-fp2k.9.8.2.SPA 9.8.2
cisco-ftd-fp2k.7.0.1-84.SPA 7.0.1-84

firepower-2130 /firmware # scope auto-install
firepower-2130 /firmware/ auto-install # install security-pack version 7.0.1-84

Then click Yes on next 2 Prompts and then,

Now the device will compile and restart it.