ā09-13-2021 09:57 AM
Why am I not able to input commands in ths FPR 2120
How do I reset it so that i put new software
MSC-FW-01# show run ^ % Invalid Command at '^' marker MSC-FW-01# show running-config ^ % Invalid Command at '^' marker MSC-FW-01# reload ^ % Invalid Command at '^' marker MSC-FW-01# ******************************************************************************* Cisco System ROMMON, Version 1.0.12, RELEASE SOFTWARE Copyright (c) 1994-2019 by Cisco Systems, Inc. Compiled Mon 06/17/2019 16:23:23.36 by builder ******************************************************************************* Current image running: Boot ROM0 Last reset cause: PowerCycleRequest (0x00002000) DIMM_1/1 : Present DIMM_2/1 : Absent Platform FPR-2120 with 16384 MBytes of main memory WARNING: This board is using a temporary MAC address. WARNING: The temporary MAC address override value = 00:11:22:33:44:1c WARNING: Please clear this value to use the programmed MAC address. WARNING: Use the following two CLI commands: WARNING: unset MACADDR WARNING: sync BIOS has been successfully locked !! MAC Address: 04:76:b0:d7:28:00 Use BREAK or ESC to interrupt boot. Use SPACE to begin boot immediately. Located '.boot_string' @ cluster 335929. Attempt autoboot: "boot disk0:installables/switch/fxos-k8-fp2k-lfbff.2.4.1.216.SPA" Located 'installables/switch/fxos-k8-fp2k-lfbff.2.4.1.216.SPA' @ cluster 5200. ###################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################### +-------------------------------------------------------------------+ +------------------------- SUCCESS ---------------------------------+ +-------------------------------------------------------------------+ | | | LFBFF signature authentication passed !!! | | | +-------------------------------------------------------------------+ LFBFF signature verified. +-------------------------------------------------------------------+ +------------------------- SUCCESS ---------------------------------+ +-------------------------------------------------------------------+ | | | LFBFF controller type check passed !!! | | | +-------------------------------------------------------------------+ INIT: version 2.88 booting Starting udev Hardware tweak APPLIED: Disable SATA Throttle.1 Hardware tweak APPLIED: Disable SATA Throttle.2 Configuring network interfaces... done. Populating dev cache Starting Power Off Shutdown Handler (poshd) poshd: using FPGA version 2.0.00 and PSEQ version 2.13 Primary SSD discovered fsck from util-linux 2.26.2 [/sbin/fsck.ext3 (1) -- /dev/sda1] fsck.ext3 -a /dev/sda1 /dev/sda1: recovering journal /dev/sda1: clean, 116/61056 files, 42401/244224 blocks fsck(/dev/sda1) returned 0 fsck from util-linux 2.26.2 [/sbin/fsck.ext3 (1) -- /dev/sda2] fsck.ext3 -a /dev/sda2 /dev/sda2: recovering journal /dev/sda2: Clearing orphaned inode 45797 (uid=0, gid=0, mode=0140600, size=0) /dev/sda2: clean, 142/61056 files, 16659/243968 blocks fsck(/dev/sda2) returned 0 fsck from util-linux 2.26.2 [/sbin/fsck.ext3 (1) -- /dev/sda3] fsck.ext3 -a /dev/sda3 /dev/sda3: recovering journal /dev/sda3: clean, 13/732960 files, 85969/2929664 blocks fsck(/dev/sda3) returned 0 fsck from util-linux 2.26.2 [/sbin/fsck.vfat (1) -- /dev/sdb1] fsck.vfat -a /dev/sdb1 fsck.fat 3.0.28 (2015-05-16) 0x41: Dirty bit is set. Fs was not properly unmounted and some data may be corrupt. Automatically removing dirty bit. Performing changes. /dev/sdb1: 46 files, 335930/1919063 clusters fsck(/dev/sdb1) returned 1 useradd: warning: the home directory already exists. Not copying any file from skel directory into it. useradd: warning: the home directory already exists. Not copying any file from skel directory into it. useradd: warning: the home directory already exists. Not copying any file from skel directory into it. useradd: warning: the home directory already exists. Not copying any file from skel directory into it. useradd: warning: the home directory already exists. Not copying any file from skel directory into it. useradd: warning: the home directory already exists. Not copying any file from skel directory into it. FIPS POST Test Script NOTICE: The FIPS POST is not run because the FIPS feature is not enabled Running postinst /etc/rpm-postinsts/100-dnsmasq... INIT: Entering runlevel: 3 Starting system message bus: dbus. Stopping all devices. Starting all devices. Checking status of all devices. There is 0 QAT acceleration device(s) in the system: ip6tables: Applying firewall rules: [ OK ] iptables: Applying firewall rules: [ OK ] Starting OpenBSD Secure Shell server: sshd done. Starting rpcbind daemon...done. starting statd: done Starting Advanced Configuration and Power Interface daemon: acpid. acpid: starting up with netlink and the input layer acpid: 1 rule loaded acpid: waiting for events: event logging is off starting 8 nfsd kernel threads: done starting mountd: done Starting ntpd: done Starting internet superserver: xinetd. No makedumpfile found. Starting Octeon NPU ... Starting Octeon NPU ... success Starting fan control daemon: fancontrol... done. INFO: in validating image ... INFO: kp_validate_image: fxmgr_absfilename /mnt/boot/installables/switch/fxos-k9-fp2k-manager.2.4.1.216.SPA INFO: Validating image /mnt/boot/installables/switch/fxos-k9-fp2k-manager.2.4.1.216.SPA signature ... Done! Computed Hash SHA2: 369351d81c6dff56c40e66611ab11f3b 895f1a0428ff0ca0c31223872828734c 62716a6554bd5fbb9f89126a0fbf838b e2b4143ff365ae2a427a169b7f4aa6d8 Embedded Hash SHA2: 369351d81c6dff56c40e66611ab11f3b 895f1a0428ff0ca0c31223872828734c 62716a6554bd5fbb9f89126a0fbf838b e2b4143ff365ae2a427a169b7f4aa6d8 The digital signature of the file: fxos-k9-fp2k-manager.2.4.1.216.SPA verified successfully INFO: beginning of kp_install INFO: do nothing INFO: kp_install: fxmgr=/mnt/boot/installables/switch/fxos-k9-fp2k-manager.2.4.1.216.SPA chmgr= update=false INFO: mkdir -p /tmp/fxmgr INFO: /bin/tar -xvzf /tmp/fxmgr/fxos-kp-manager.2.4.1.216.tgz ... INFO: kp_install: shutting down the old version ... INFO: Terminating DME and all AGs ... INFO: -- INFO: kp_install: Unlinking a old libraries ... INFO: kp_install: Deleting the old manager image ... INFO: kp_install: Installing the new image ... INFO: deleting unnecessary xml file..!! INFO: deleted unnecessary xml file..!! INFO: kp_post_install ... INFO: kp_post_install: fxmgr=/mnt/boot/installables/switch/fxos-k9-fp2k-manager.2.4.1.216.SPA chmgr= update=false INFO: kp_post_install: Linking libraries ... INFO: kp_post_install: Linking binaries ... INFO: Trying to add iptables and ip6tables rules ... INFO: Set up Lina Diagnostic Interface ... INFO: Configure management interface ... ERROR: interface management0 is not ready after waiting for 60 seconds. Current link status: [10: management0: <NO-CARRIER,BROADCAST,MULTICAST,PROMISC,UP> mtu 1500 qdisc noqueue state DOWN mode DEFAULT group default \ link/ether 04:76:b0:d7:28:00 brd ff:ff:ff:ff:ff:ff] INFO: Configure system files ... INFO: System Name is: MSC-FW-01 Starting sensors logging daemon: sensord... done. INFO: /mnt/boot/installables/switch/fxos-k8-fp2k-npu.2.4.1.216.SPA INFO: Need to validate the image Done! Computed Hash SHA2: ca8d909650560a482060c290a83e18d5 fa6dd961ab83bc6817721408084b3703 147f2071c5e62e5f80eee925c66e3594 e4a8843e97a2c15a40de4cb53476fe2c Embedded Hash SHA2: ca8d909650560a482060c290a83e18d5 fa6dd961ab83bc6817721408084b3703 147f2071c5e62e5f80eee925c66e3594 e4a8843e97a2c15a40de4cb53476fe2c The digital signature of the file: fxos-k8-fp2k-npu.2.4.1.216.SPA verified successfully INFO: mkdir -p /tmp/npu INFO: all files are there ... INFO: kp_startup: setting up fxmgr apache ... INFO: kp_startup: Start KP httpd setup... httpdRegister INFO: [httpd.3624 -s -4 192.168.45.45 -n localhost] httpdRegister INFO: SKIP httpd syntax check httpdRegister INFO: Starting httpd setup/registration... httpdRegister INFO: Completed httpd setup/registration! INFO: httpdRegister [httpd.3624 script exit] INFO: kp_startup: Completed KP httpd setup! Starting crond: OK FTD 1:/opt/cisco/csp/cores /opt/cisco/csp/cores 31457280 Threat Defense System: CMD=-bootup, CSP-ID=cisco-ftd.6.3.0.83__ftd_001_JMX2444Z05RR774SW1, FLAG='' System is booting up ... Command [ln -sf /opt/cisco/csp/applications/cisco-ftd.6.3.0.83__ftd_001_JMX2444Z05RR774SW1/app_data/Volume/6.3.0/log /opt/cisco/csp/applications/logs/cisco-ftd.6.3.0.83__ftd_001_JMX2444Z05RR774SW1.var-log] failed: ln: failed to create symbolic link '/opt/cisco/csp/applications/logs/cisco-ftd.6.3.0.83__ftd_001_JMX2444Z05RR774SW1.var-log/log': Disk quota exceeded INFO:-MspCheck: Configuration Xml found is /opt/cisco/csp/applications/configs/cINFO: System Disks /dev/sda is present. Status: Operable. /dev/sdb is present. Status: Inoperable. Cisco FPR Series Security Appliance MSC-FW-01 login: cat: /dev/cgroups/memory/fxos/memory.memsw.usage_in_bytes: No such file or directory cat: /dev/cgroups/memory/fxos/memory.memsw.max_usage_in_bytes: No such file or directory cat: /dev/cgroups/memory/fxos/memory.memsw.limit_in_bytes: No such file or directory /bin/grep: /opt/cisco/config/platform/rmdb/SSP-RESERVED-CPU: No such file or directory cat: /dev/cgroups/memory/fxos/memory.memsw.usage_in_bytes: No such file or directory cat: /dev/cgroups/memory/fxos/memory.memsw.max_usage_in_bytes: No such file or directory cat: /dev/cgroups/memory/fxos/memory.memsw.limit_in_bytes: No such file or directory /bin/grep: /opt/cisco/config/platform/rmdb/SSP-RESERVED-CPU: No such file or directory Sep 13 14:31:50 MSC-FW-01 port-manager : portmgr_insert_card: mainboard 0xcde, ctype 0xcde Sep 13 14:31:52 MSC-FW-01 port-manager : Alert: Internal1/2 link changed to UP Sep 13 14:33:10 MSC-FW-01 port-manager : Alert: Ethernet1/3 link changed to UP Sep 13 14:33:10 MSC-FW-01 port-manager : Alert: Ethernet1/1 link changed to UP Cisco FPR Series Security Appliance MSC-FW-01 login: Cisco FPR Series Security Appliance MSC-FW-01 login: admin Password: Last login: Fri Aug 27 10:51:03 UTC 2021 on ttyS0 Successful login attempts for user 'admin' : 1 Cisco Firepower Extensible Operating System (FX-OS) Software TAC support: http://www.cisco.com/tac Copyright (c) 2009-2018, Cisco Systems, Inc. All rights reserved. The copyrights to certain works contained in this software are owned by other third parties and used and distributed under license. Certain components of this software are licensed under the "GNU General Public License, version 3" provided with ABSOLUTELY NO WARRANTY under the terms of "GNU General Public License, Version 3", available here: http://www.gnu.org/licenses/gpl.html. See User Manual (''Licensing'') for details. Certain components of this software are licensed under the "GNU General Public License, version 2" provided with ABSOLUTELY NO WARRANTY under the terms of "GNU General Public License, version 2", available here: http://www.gnu.org/licenses/old-licenses/gpl-2.0.html. See User Manual (''Licensing'') for details. Certain components of this software are licensed under the "GNU LESSER GENERAL PUBLIC LICENSE, version 3" provided with ABSOLUTELY NO WARRANTY under the terms of "GNU LESSER GENERAL PUBLIC LICENSE" Version 3", available here: http://www.gnu.org/licenses/lgpl.html. See User Manual (''Licensing'') for details. Certain components of this software are licensed under the "GNU Lesser General Public License, version 2.1" provided with ABSOLUTELY NO WARRANTY under the terms of "GNU Lesser General Public License, version 2", available here: http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html. See User Manual (''Licensing'') for details. Certain components of this software are licensed under the "GNU Library General Public License, version 2" provided with ABSOLUTELY NO WARRANTY under the terms of "GNU Library General Public License, version 2", available here: http://www.gnu.org/licenses/old-licenses/lgpl-2.0.html. See User Manual (''Licensing'') for details. MSC-FW-01# configure terminal ^ % Invalid Command at '^' marker MSC-FW-01#
Solved! Go to Solution.
ā09-13-2021 10:15 AM
@wanumet Have you connected via console cable? Looks like you are in the FXOS CLI, you can run the command connect ftd to connect to the FTD CLI.
ā09-13-2021 10:15 AM
@wanumet Have you connected via console cable? Looks like you are in the FXOS CLI, you can run the command connect ftd to connect to the FTD CLI.
ā09-13-2021 12:19 PM
Thank you, @Rob Ingram
I will do tHat. I want to reset it, install new software (latest version) and then restore its configuration(which I have backed up)
Kindly guide me through the steps.
ā09-13-2021 12:28 PM
Here is the cisco reimaging guide
https://www.cisco.com/c/en/us/td/docs/security/firepower/quick_start/reimage/asa-ftd-reimage.html
ā09-15-2021 02:44 AM
MSC-FW-01 /eth-uplink # exit MSC-FW-01# connect ftd Error: Application is not installed. MSC-FW-01#
ā09-15-2021 02:56 AM
So FTD is not installed? Refer to this video https://www.youtube.com/watch?v=mxW4KJWVUbc to install FTD on FPR2100 appliances.
Here is the deployment guide also.
ā09-15-2021 03:20 AM
Am having trouble getting the software from cisco.
I want to use GUI but I can't even ping it from management port yet it gives a dhcp up to my laptop
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide