07-25-2017 01:26 AM - edited 03-12-2019 02:44 AM
Hi all,
I'm reimaging a bunch of FP4110 appliances. They were shipped with a very old version of FXOS and upgrading them (with intermediate steps) just would take too much time.
So, I started with the section 'Recovering from a corrupted filessystem' as described in the FXOS 2.2.1 Config Guide (page 94). This way, I can wipe the disk and put the final version on it.
When I'm done with reimaging the appliances, the WebGUI doesn't work anymore... So something went wrong during the reimaging process. Because I didn't had error messages during the process, I think step 8 might be the problem:
Step 8, 'Upgrade the FXOS Platform Bundle' (page 99)
--> I'm unable to determine if the process completed successfully or not.
scope auto-install
install platform platform-vers 2.2(1.66)
The manual states that the process can take up to 30 minutes. But how can I know for sure if the process is done or not?
Is it required to download AND install the bundle? Or only download the bundle?
Using the command 'show firmware monitor', I do not understand what indicates the process (installation) is ready.
So maybe, after 30 minutes, the process wasn't done yet with a non-working WebGUI as a result?
Anyone with experiences on that? Any help is appreciated!
07-26-2017 11:20 AM
Hi all,
The problem is solved. Despite the fact I didn't setup ACL's for SSH and HTTPS during the initial wizard, all access through HTTPS/SSH was blocked. You can easily solve it by configuring ACL's afterwards....
See page 74 of the config guide:
Firepower-chassis # scope system
Firepower-chassis /system # scope services
Firepower-chassis /system/services # create ip-block 10.1.1.1 24 https
Firepower-chassis /system/services/ip-block* # com
Firepower-chassis /system/services/ip-block # up
Firepower-chassis /system/services # create ip-block 11.1.1.1 24 ssh
Firepower-chassis /system/services/ip-block* # com
Firepower-chassis /system/services/ip-block # up
Firepower-chassis /system/services # create ip-block 12.1.1.1 24 snmp
Firepower-chassis /system/services/ip-block* # com
Firepower-chassis /system/services/ip-block # up
Firepower-chassis /system/services # sh ip-block
Permitted IP Block:
IP Address Prefix Length Protocol
--------------- ------------- --------
10.1.1.1 24 Https
11.1.1.1 24 Ssh
12.1.1.1 24 Snmp
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide