Installing FirePOWER software on Cisco ASA 5516-X.

[eng.khaled.omar]

Hi all,

When i try to install the FirePOWER software on Cisco ASA 5516-X and i issue the following command:

ASASFR-boot> system install ftp://192.168.2.4/asasfr-sys-6.2.2-81.pkg

It gives the following:

Verifying

110

Upgrade aborted

When i ping the address 192.168.2.4 normally, it replies, but inside the (ASASFR-boot>) it is not replying.

I configured the system with IPv4 address/mask, default gateway and DNS information, don't know what is missing.

Thanks in advance.

Khaled Omar

[Abheesh Kumar]

Hi,
Please go through the below guide
https://www.cisco.com/c/en/us/td/docs/security/firepower/quick_start/reimage/asa-ftd-reimage.html

Hope This Helps
Abheesh

[Marvin Rhoads]

The image on your ftp server could be corrupted. Compare and verify the checksum with what's posted on Cisco's download page.

[eng.khaled.omar]

I didn't download the FirePOWER software image from Cisco website, i downloaded it from internet, how can i compare and verify the checksum?

[eng.khaled.omar]

I didn't download the FirePOWER software image from Cisco website, i downloaded it from internet, how can i compare and verify the checksum?

[eng.khaled.omar]

The MD5 checksum is the same as in Cisco website.

[Marvin Rhoads]

Can you confirm that you are using the "asasfr-5500x-boot-6.2.2-3.img" boot image file that corresponds with the system installation package?

[eng.khaled.omar]

I use the following boot image:

asasfr-5500x-boot-5.4.1-211.img

[Marvin Rhoads · Accepted solution]

You cannot use a boot image that doesn't match the installation package.

[eng.khaled.omar]

I uploaded the new boot image and removed the old boot image from flash, when i issue the following command:

ASA# sw-module module sfr recover boot

it gives the following error:

Module sfr cannot be recovered, please stop the current recovery before trying
to recover again.

When i issue the following command:

ASA# sw-module module sfr uninstall 

It gives the following error:

Module sfr cannot be uninstalled, not in Up, Down, or Unresponsive state.

How to stop the current recovery and then use the new boot image?

[Marvin Rhoads]

First try to shutdown the module:

sw-module module sfr shutdown

[eng.khaled.omar]

It gives the following output:

Module sfr cannot be shut down, not in Up or Unresponsive state.

The output of the "show module" command is:

Mod Card Type                                                                 Model                        Serial No.
---- -------------------------------------------- ------------------ -----------
  1   ASA 5516-X with FirePOWER services, 8GE, AC,       ASA5516                   JAD194803CU
 sfr  Unknown                                                                   N/A                            JAD194803CU

Mod  MAC Address Range                            Hw Version      Fw Version      Sw Version
---- --------------------------------- ------------ ------------ ---------------
1      00fe.c832.04b1 to 00fe.c832.04b9      2.1                  1.1.12             9.8(1)
sfr    00fe.c832.04b0 to 00fe.c832.04b0      N/A                 N/A

Mod  SSM Application Name                    Status                    SSM Application Version
---- ------------------------------ ---------------- --------------------------

Mod  Status                        Data Plane Status            Compatibility
---- ------------------ --------------------- -------------
 1     Up Sys                       Not Applicable
sfr    Recover                     Not Applicable

[Marvin Rhoads]

I know one of the options works because I've done it myself. I just don't recall which one it is for when we get into this indeterminate state.

You've tried shutdown and uninstall so the remaining options are reset and reload. Give them a try.

[eng.khaled.omar]

SYD-ASA5516X-FW01/stby# sw-module module sfr reset

Module sfr should be shut down before resetting it or loss of configuration
may occur.

Module sfr cannot be reset, please stop the current recovery before trying
to reset the module.

SYD-ASA5516X-FW01/stby# sw-module module sfr reload

Reload module sfr? [confirm]

Module sfr cannot be reloaded, not in Up state.

No more options.