My ASA 5506-X stopped working

[AmmarHermiz14196]

Hi,

My ASA 5506-X stopped working. I am getting below and keep repeating itself on and on  Please help !!!

Thanks, Ammar 

Cisco Systems ROMMON, Version 1.1.13, RELEASE SOFTWARE
Copyright (c) 1994-2017 by Cisco Systems, Inc.
Compiled Mon 10/16/2017 17:54:58.29 by wchen64

Current image running: Boot ROM0

Last reset cause: LocalSoft
DIMM Slot 0 : Present

Platform ASA5506 with 4096 Mbytes of main memory
MAC Address: a0:93:51:f3:09:bf

Use BREAK or ESC to interrupt boot.
Use SPACE to begin boot immediately.

media drive disk0: not present
Attempt autoboot: "boot disk0:"
media drive disk0: not present
boot: cannot determine first file name on device "disk0:"
autoboot: All boot attempts have failed.
autoboot: Restarting the system.

[AmmarHermiz14196]

I was able to to get the TFTP set up but I don't have the image.

anyway it is what it is. 

Thank you very much 

[khalidanahi]

Hello Ammar

How did you start your FW to Rommon Mode after this problem?

[AmmarHermiz14196]

Yes, and I was able to reconfigure the FW. But as soon as I power it off, reboot or restart I lose the configuration. For some reason won’t save the startup configuration.

I think the physical ram is bad. I can’t change it because it’s embedded into the motherboard or whatever you call it.

Ammar

[AmmarHermiz14196]

Hi Balaji,

I was able to find the file asa961-smp-k9.bin but i am sure doing something wrong which is it cut off . please see below

I am sure missing something? 

rommon 53 > tftp
ADDRESS: 10.0.0.3
NETMASK: 255.0.0.0
GATEWAY: 10.0.0.5
SERVER: 10.0.0.5
IMAGE: asa961-smp-k8.bin
MACADDR: a0:93:51:f3:09:bf
VERBOSITY: Progress
RETRY: 40
PKTTIMEOUT: 7200
BLKSIZE: 1460
CHECKSUM: Yes
PORT: GbE/1
PHYMODE: Auto Detect
........................
ARP: address resolution for 10.0.0.5 timed out.
ARP failed with failure code 1. TFTP transfer aborted.

TFTP: Operation terminated prematurely.
rommon 54 >

[balaji.bandi]

Do you have TFTP Server and connected where ? (is this running on your PC or Laptop, which is connected to ASA ?

Device has USB right, if you have difficult to TFTP, why not use USB., Copy the image(.bin File)  to USB and boot from USB.

[AmmarHermiz14196]

Hi Balaji,

I was able to get it configured the ASA. but won't keep the configurations as soon I turn it off or reboot it wipe everything, I start from zero which is doing the tftp through Rommon upload the image ( This one is "asa9-14-8-lfbff-k8.SPA" I downloaded online from Google).

It was the main problem before is won't hold the configurations. 

Is it something to do with the battery CR2025 need to be replaced or it is nothing to do with it??

[balaji.bandi]

Ok that is good process (not sure is that version good or not, i dont trust some time the images available on internet, but it works)

Once you boot, did you format the flash and copy to flash ?

or you still booting from USB and trying to save the config ?

can you post

show version

dir

show run boot

[AmmarHermiz14196]

Once you boot, did you format the flash and copy to flash ? No i just upload my configurations 

or you still booting from USB and trying to save the config ? No when i boot it after that goes blank so upload everything again with TFTP. I dont use USB

SHO VERSION

ciscoasa# sho version

Cisco Adaptive Security Appliance Software Version 9.14(2)8
SSP Operating System Version 2.8(1.144)

Compiled on Fri 29-Jan-21 18:43 GMT by builders
System image file is "tftp://10.0.0.2/asa9-14-2-8-lfbff-k8.SPA"
Config file at boot was "startup-config"

ciscoasa up 17 hours 26 mins

Hardware: ASA5506, 4096 MB RAM, CPU Atom C2000 series 1250 MHz, 1 CPU (4 cores)
BIOS Flash M25P64 @ 0xfed01000, 16384KB

Encryption hardware device : Cisco ASA Crypto on-board accelerator (revision 0x1)
Number of accelerators: 1

1: Ext: GigabitEthernet1/1 : address is a093.51f3.09c0, irq 255
2: Ext: GigabitEthernet1/2 : address is a093.51f3.09c1, irq 255
3: Ext: GigabitEthernet1/3 : address is a093.51f3.09c2, irq 255
4: Ext: GigabitEthernet1/4 : address is a093.51f3.09c3, irq 255
5: Ext: GigabitEthernet1/5 : address is a093.51f3.09c4, irq 255
6: Ext: GigabitEthernet1/6 : address is a093.51f3.09c5, irq 255
7: Ext: GigabitEthernet1/7 : address is a093.51f3.09c6, irq 255
8: Ext: GigabitEthernet1/8 : address is a093.51f3.09c7, irq 255
9: Int: Internal-Data1/1 : address is a093.51f3.09bf, irq 255
10: Int: Internal-Data1/2 : address is 0000.0001.0002, irq 0
11: Int: Internal-Control1/1 : address is 0000.0001.0001, irq 0
12: Int: Internal-Data1/3 : address is 0000.0001.0003, irq 0
13: Ext: Management1/1 : address is a093.51f3.09bf, irq 0
14: Int: Internal-Data1/4 : address is 0000.0100.0001, irq 0
The Running Activation Key is not valid, using default settings:
The Running Activation Key feature: 2 security contexts exceed the limit on the platform, reduced to 0 security contexts.

Licensed features for this platform:
Maximum Physical Interfaces : Unlimited perpetual
Maximum VLANs : 5 perpetual
Inside Hosts : Unlimited perpetual
Failover : Disabled perpetual
Encryption-DES : Enabled perpetual
Encryption-3DES-AES : Disabled perpetual
Carrier : Disabled perpetual
AnyConnect Premium Peers : 2 perpetual
AnyConnect Essentials : Disabled perpetual
Other VPN Peers : 10 perpetual
Total VPN Peers : 12 perpetual
AnyConnect for Mobile : Disabled perpetual
AnyConnect for Cisco VPN Phone : Disabled perpetual
Advanced Endpoint Assessment : Disabled perpetual
Shared License : Disabled perpetual
Total TLS Proxy Sessions : 2 perpetual
Botnet Traffic Filter : Disabled perpetual
Cluster : Disabled perpetual

This platform has a Base license.

Serial Number: JAD22250L66
Running Permanent Activation Key: 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000
Configuration register is 0x1
FPGA UPGRADE Version : 2.4
FPGA GOLDEN Version : unavailable
ROMMON Version : 1.1.13
WARNING: Platform FPGA version is older than minimum recommended image.
WARNING: Platform ROMMON version is older than minimum recommended image.
Image type : Release
Key Version : A
Configuration last modified by enable_15 at 00:18:44.029 UTC Mon Nov 8 2021

When i used DIR and show run boot nothing happened. See below please 

ciscoasa# dir

%Error opening disk0:/ (No such file or directory)
ciscoasa# sho dir
^
ERROR: % Invalid input detected at '^' marker.
ciscoasa# sho run boot
ciscoasa# show boot run
^
ERROR: % Invalid input detected at '^' marker.
ciscoasa# show run boot
ciscoasa#

[balaji.bandi]

ROMMON Version : 1.1.13
WARNING: Platform FPGA version is older than minimum recommended image.
WARNING: Platform ROMMON version is older than minimum recommended image.

ROMMON needs to be upgraded here.

Boot from TFTP and format flash

# fsck flash:

# format flash:

[khalidanahi]

Hello 

I Have the same problem and I cannot access to ROMMON Mode.

Rom image verified correctly

Cisco Systems ROMMON, Version 1.1.8, RELEASE SOFTWARE
Copyright (c) 1994-2015 by Cisco Systems, Inc.
Compiled Thu 06/18/2015 12:15:56.43 by builders

Current image running: Boot ROM0
Last reset cause: LocalSoft
DIMM Slot 0 : Present

Platform ASA5506 with 4096 Mbytes of main memory
MAC Address: f8:0b:cb:f8:0a:a6

INFO: PASSWORD RECOVERY functionality is disabled.
Use BREAK or ESC to interrupt boot.
Use SPACE to begin boot immediately.
Boot interrupted.

WARNING: Password recovery and ROMMON command line access has been
disabled by your security policy. Answering YES below will cause ALL
configurations, passwords, images in 'disk0:' to be erased.
ROMMON command line access will be re-enabled, and a new image must be
downloaded via ROMMON.

Permanently erase 'disk0:'?Yes 

media drive disk0: not present
Attempt autoboot: "boot disk0:"
media drive disk0: not present
boot: cannot determine first file name on device "disk0:"
autoboot: All boot attempts have failed.
autoboot: Restarting the system.

Help Please.

[Marius Gunnerud]

I suggest creating a new post rather than piggy-backing on this post, that way the accepted solution, if any, could help someone else in the future and the contributor rewarded with an accepted solution.

But first thoughts is that you either have a missing disk0: or it is corrupt.

create a new post and we can help you further.  Remember to be as detailed as possible in your post.  Include such things as what you were doing when the issue occurred (new install, upgrading, configuring, randomly stopped working without any user configuration, etc.), did the setup work previously, provide any logs that may have been sent to a syslog server.

[khalidanahi]

Thank you for your reply.

I'll creating a new Post explaining in détails this issue.