Missing Startup-config

[AmmarHermiz14196]

Hi,

I have ASA 5506-X every time I reboot the firewall or power goes out I have to re-upload the image through TFTP. It wont save the configuration. After reloading the configuration and trying to WR I get below:

please help!!

ciscoasa(config)# wr
Building configuration...
Cryptochecksum: 38821f41 471bd396 f025a3e2 ea1231a6

%Error opening nvram:/startup-config (No such file or directory)
[OK]

I ran show version got below :

ciscoasa(config)# show version

Cisco Adaptive Security Appliance Software Version 9.14(2)8
SSP Operating System Version 2.8(1.144)

Compiled on Fri 29-Jan-21 18:43 GMT by builders
System image file is "tftp://10.0.0.1/asa9-14-2-8-lfbff-k8.SPA"
Config file at boot was "startup-config"

ciscoasa up 31 mins 0 secs

Hardware: ASA5506, 4096 MB RAM, CPU Atom C2000 series 1250 MHz, 1 CPU (4 cores)
BIOS Flash M25P64 @ 0xfed01000, 16384KB

Encryption hardware device : Cisco ASA Crypto on-board accelerator (revision 0x1)
Number of accelerators: 1

1: Ext: GigabitEthernet1/1 : address is a093.51f3.09c0, irq 255
2: Ext: GigabitEthernet1/2 : address is a093.51f3.09c1, irq 255
3: Ext: GigabitEthernet1/3 : address is a093.51f3.09c2, irq 255
4: Ext: GigabitEthernet1/4 : address is a093.51f3.09c3, irq 255
5: Ext: GigabitEthernet1/5 : address is a093.51f3.09c4, irq 255
6: Ext: GigabitEthernet1/6 : address is a093.51f3.09c5, irq 255
7: Ext: GigabitEthernet1/7 : address is a093.51f3.09c6, irq 255
8: Ext: GigabitEthernet1/8 : address is a093.51f3.09c7, irq 255
9: Int: Internal-Data1/1 : address is a093.51f3.09bf, irq 255
10: Int: Internal-Data1/2 : address is 0000.0001.0002, irq 0
11: Int: Internal-Control1/1 : address is 0000.0001.0001, irq 0
12: Int: Internal-Data1/3 : address is 0000.0001.0003, irq 0
13: Ext: Management1/1 : address is a093.51f3.09bf, irq 0
14: Int: Internal-Data1/4 : address is 0000.0100.0001, irq 0
The Running Activation Key is not valid, using default settings:
The Running Activation Key feature: 2 security contexts exceed the limit on the platform, reduced to 0 security contexts.

Licensed features for this platform:
Maximum Physical Interfaces : Unlimited perpetual
Maximum VLANs : 5 perpetual
Inside Hosts : Unlimited perpetual
Failover : Disabled perpetual
Encryption-DES : Enabled perpetual
Encryption-3DES-AES : Disabled perpetual
Carrier : Disabled perpetual
AnyConnect Premium Peers : 2 perpetual
AnyConnect Essentials : Disabled perpetual
Other VPN Peers : 10 perpetual
Total VPN Peers : 12 perpetual
AnyConnect for Mobile : Disabled perpetual
AnyConnect for Cisco VPN Phone : Disabled perpetual
Advanced Endpoint Assessment : Disabled perpetual
Shared License : Disabled perpetual
Total TLS Proxy Sessions : 2 perpetual
Botnet Traffic Filter : Disabled perpetual
Cluster : Disabled perpetual

This platform has a Base license.

Serial Number: JAD22250L66
Running Permanent Activation Key: 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000
Configuration register is 0x1
FPGA UPGRADE Version : 2.4
FPGA GOLDEN Version : unavailable
ROMMON Version : 1.1.13
WARNING: Platform FPGA version is older than minimum recommended image.
WARNING: Platform ROMMON version is older than minimum recommended image.
Image type : Release
Key Version : A
Configuration last modified by enable_15 at 22:53:53.779 UTC Fri Nov 26 2021

[Leo Laohoo]

---

@AmmarHermiz14196 wrote:

System image file is "tftp://10.0.0.1/asa9-14-2-8-lfbff-k8.SPA"

---

Maybe because someone has changed the boot variable string of the ASA.  
Instead of reading the files from disk0: (default), someone instructed the ASA to go to the TFTP server.  

Either the TFTP has a read/write exception or the TFTP server no longer exist.  When trying to "save" the config, the ASA spits out the error message that it could not write the startup-config file in a TFTP server that it could not write to.  And because the ASA cannot save the config, the ASA always boots up without any config.

[AmmarHermiz14196]

Hi Leo,

What is the solution in this case ? can you please help me or guide me to the right solution. 

Thanks,

Ammar

[Leo Laohoo]

Post the complete output to the command "sh bootvar".

[AmmarHermiz14196]

see below please what I got when I typed :

ciscoasa(config)# show bootvar

BOOT variable =
Current BOOT variable =
CONFIG_FILE variable =
Current CONFIG_FILE variable =
ciscoasa(config)#

[balaji.bandi]

May be try  :copy running-config startup-config

still not working post dir output.

[AmmarHermiz14196]

Please see below :

ciscoasa(config)# copy running-config startup-config

Source filename [running-config]?
Cryptochecksum: 77f702d6 fdcc61b1 5d5c12de 4cf540aa

%Error opening nvram:/startup-config (No such file or directory)
ciscoasa(config)# dir

%Error opening disk0:/ (No such file or directory)
ciscoasa(config)#

[Marius Gunnerud]

Is this ASA in production? or is it your personal ASA?  Did you get it from a Cisco partner company or from, for example, Ebay?

It sounds like either the flash is corrupt or missing.

[AmmarHermiz14196]

Hi Marius,

This ASA for personal use. it's use for my home network. Bought it from Amazon in 2019. 

Please there is any way to fix it?? ....... Right now working fine but as soon as power it off or reboot it I lose everything and I have to upload the image through Rommon mode/TFTP.  

It has to be a way to correct this ? 

Thanks,

Ammar 

[balaji.bandi]

Lets do below steps ( before doing copy running config to TFTP server 

https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/81884-asa5500-disk0-error.html

[AmmarHermiz14196]

below is the result.   Please let me know what i am doing wrong??

ciscoasa# format disk0:

Format operation may take a while. Continue? [confirm]

Format operation will destroy all data in "disk0:". Continue? [confirm]
Initializing partition - done!
Creating FAT32 filesystem
/dev/sdb1: No such file or directory
mkfs.fat 3.0.28 (2015-05-16)

System tables written to disk
mount: mount point /mnt/disk0 does not exist

Format of disk0 complete
WARNING: Restoring security context mode failed.
WARNING: Restoring cluster interface mode failed.
ciscoasa# copy tftp disk0:

Address or name of remote host []? 10.0.0.1

Source filename []? asa9-14-2-8-lfbff-k8.SPA

Destination filename [asa9-14-2-8-lfbff-k8.SPA]?

Accessing tftp://10.0.0.1/asa9-14-2-8-lfbff-k8.SPA...
%Error writing disk0:/asa9-14-2-8-lfbff-k8.SPA (Bad file descriptor)
ciscoasa#

[balaji.bandi]

You already have before length discuss the same, and we concluded device is faulty. why this comes as a new topic? ( os is this new device ?)

https://community.cisco.com/t5/network-security/my-asa-5506-x-stopped-working/m-p/4499652#M1084915

[Marius Gunnerud]

I suggest you go on ebay and buy an ASA flash drive there and install it in the ASA. As mentioned earlier, this is a hardware issue.

[AmmarHermiz14196]

Hi Marius,

When are you saying an ASA flash drive? you meant buying whole ASA 5506?  I searched for ASA flash drive on eBay didn't see a hardware like that on eBay? please advice 

Thanks,

Ammar

[Marius Gunnerud]

A quick search on eBay and I found this.

This is an ASA flash drive.

If you decide to purchase this drive, or any other drive for that matter, on eBay do so at your own risk.  I take no responsibility for any purchase gone bad, or if the drive is faulty.