cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
341
Views
0
Helpful
1
Replies

Recovering from a corrupted filessystem on FP4110 - WebGUI not working anymore

ruben.omez
Level 1
Level 1

Hi all,

I'm reimaging a bunch of FP4110 appliances. They were shipped with a very old version of FXOS and upgrading them (with intermediate steps) just would take too much time.

So, I started with the section 'Recovering from a corrupted filessystem' as described in the FXOS 2.2.1 Config Guide (page 94). This way, I can wipe the disk and put the final version on it.

When I'm done with reimaging the appliances, the WebGUI doesn't work anymore... So something went wrong during the reimaging process. Because I didn't had error messages during the process, I think step 8 might be the problem: 

Step 8, 'Upgrade the FXOS Platform Bundle' (page 99)

--> I'm unable to determine if the process completed successfully or not.

scope auto-install

install platform platform-vers 2.2(1.66)

The manual states that the process can take up to 30 minutes. But how can I know for sure if the process is done or not?

Is it required to download AND install the bundle? Or only download the bundle? 

Using the command 'show firmware monitor', I do not understand what indicates the process (installation) is ready.

So maybe, after 30 minutes, the process wasn't done yet with a non-working WebGUI as a result?

Anyone with experiences on that? Any help is appreciated!

1 Reply 1

ruben.omez
Level 1
Level 1

Hi all,

The problem is solved. Despite the fact I didn't setup ACL's for SSH and HTTPS during the initial wizard, all access through HTTPS/SSH was blocked. You can easily solve it by configuring ACL's afterwards....

See page 74 of the config guide:

Firepower-chassis # scope system
Firepower-chassis /system # scope services
Firepower-chassis /system/services # create ip-block 10.1.1.1 24 https
Firepower-chassis /system/services/ip-block* # com
Firepower-chassis /system/services/ip-block # up
Firepower-chassis /system/services # create ip-block 11.1.1.1 24 ssh
Firepower-chassis /system/services/ip-block* # com
Firepower-chassis /system/services/ip-block # up
Firepower-chassis /system/services # create ip-block 12.1.1.1 24 snmp
Firepower-chassis /system/services/ip-block* # com
Firepower-chassis /system/services/ip-block # up
Firepower-chassis /system/services # sh ip-block
Permitted IP Block:
IP Address Prefix Length Protocol
--------------- ------------- --------
10.1.1.1 24 Https
11.1.1.1 24 Ssh
12.1.1.1 24 Snmp

Review Cisco Networking for a $25 gift card