Problem on OS ASA5516

[danielbusisa1410]

Hi Guys, 

I need your help for my problem, I have ASA5516 on active and standby. We already upgrade the IOS version to 9.5(1) both but sometimes ASA devices which as active mode change the IOS version to 9.8(2). 

This the error messages : 

************WARNING****WARNING****WARNING********************************
Mate version 9.5(1) is not identical with ours 9.8(2)
************WARNING****WARNING****WARNING********************************

ASA5516# sh flash:
--#-- --length-- -----date/time------ path
125 108563072 Aug 07 2019 00:39:40 asa982-lfbff-k8.SPA
126 26970456 Aug 07 2019 00:39:56 asdm-782.bin
127 56 Apr 06 2020 12:39:07 .boot_string
12 4096 Aug 07 2019 00:43:14 log
14 6760 Apr 05 2020 01:51:25 log/asa-appagent.log
23 4096 Aug 07 2019 00:44:06 crypto_archive
24 4096 Aug 07 2019 00:44:08 coredumpinfo
25 59 Aug 07 2019 00:44:08 coredumpinfo/coredump.cfg
128 16961877 Sep 25 2019 15:50:48 anyconnect-win-4.1.04011-k9.pkg
129 2686 Sep 25 2019 15:50:54 fr_customization.po
130 4149 Sep 25 2019 15:50:54 fr_PortForwarder.po
131 34638 Sep 25 2019 15:50:54 fr_webvpn.po
132 2927 Sep 25 2019 15:50:54 ja_customization.po
133 4481 Sep 25 2019 15:50:54 ja_PortForwarder.po
134 36989 Sep 25 2019 15:50:54 ja_webvpn.po
135 3101 Sep 25 2019 15:50:56 ru_customization.po
136 4932 Sep 25 2019 15:50:56 ru_PortForwarder.po
137 42083 Sep 25 2019 15:50:56 ru_webvpn.po
138 91384 Sep 25 2019 15:51:00 startup-config-new.cfg
139 4096 Oct 17 2019 16:23:46 tmp
140 74369568 Oct 18 2019 11:27:46 asa951-lfbff-k8.spa
141 613135 Apr 05 2020 01:54:38 crash.txt

ASA5516# sh bootvar

BOOT variable = disk0:/asa846-5-k8.bin
Current BOOT variable = disk0:/asa846-5-k8.bin
CONFIG_FILE variable =
Current CONFIG_FILE variable =

This already happen 2 times with sequence time around 1-2 month ago, Kindly need your help regarding my problem?

Thank you

[Cristian Matei]

Hi,

    The configured boot variable image "asa846-5-k8.bin" which is no longer present on the ASA flash, so upon a reload it will boot with the first image from flash, which is "asa982-lfbff-k8.SPA". What is the image you want to run? Assuming it's "asa951-lfbff-k8.spa", run this command "boot system disk0:/asa951-lfbff-k8.spa", ensure the image is present on both ASA's, issue "show bootvar" to confirm the change, save the configuration and reload.

Regards,

Cristian Matei.

[danielbusisa1410]

Hi Christian,

Thank you for your information and I have concern about the IOS, we use the 'SPA' or 'BIN' for this case and also we using firepower on our ASA ?

Thank you

[Cristian Matei]

Hi,

    Can you post the output of "show module" and "show module sfr details"?

Regards,
Cristian Matei.

[danielbusisa1410]

Hi,

Here the result :

# sh module

Mod Card Type Model Serial No.
---- -------------------------------------------- ------------------ -----------
1 ASA 5516-X with FirePOWER services, 8GE, AC, ASA5516 JAD23290RV8
sfr FirePOWER Services Software Module ASA5516 JAD23290RV8

Mod MAC Address Range Hw Version Fw Version Sw Version
---- --------------------------------- ------------ ------------ ---------------
1 084f.a993.e8ab to 084f.a993.e8b3 3.3 1.1.15 9.8(2)
sfr 084f.a993.e8aa to 084f.a993.e8aa N/A N/A 6.2.2-81

Mod SSM Application Name Status SSM Application Version
---- ------------------------------ ---------------- --------------------------
sfr ASA FirePOWER Up 6.2.2-81

Mod Status Data Plane Status Compatibility
---- ------------------ --------------------- -------------
1 Up Sys Not Applicable
sfr Up Up

# show module sfr details
Getting details from the Service Module, please wait...

Card Type: FirePOWER Services Software Module
Model: ASA5516
Hardware version: N/A
Serial Number: JAD23290RV8
Firmware version: N/A
Software version: 6.2.2-81
MAC Address Range: 084f.a993.e8aa to 084f.a993.e8aa
App. name: ASA FirePOWER
App. Status: Up
App. Status Desc: Normal Operation
App. version: 6.2.2-81
Data Plane Status: Up
Console session: Ready
Status: Up
DC addr: No DC Configured
Mgmt IP addr: 192.168.45.45
Mgmt Network mask: 255.255.255.0
Mgmt Gateway: 0.0.0.0
Mgmt web ports: 443
Mgmt TLS enabled: true

[Cristian Matei]

Hi,

   The SFR module looks to be functional. As for the images "bin" or "spa" , this varies per HW platform, but for the ASA5516X, you use the SPA images.

Regards,

Cristian Matei.