Reimage Cisco FTD 1120 - empty disk, missing correct FXOS

[Jon Are Endrerud]

Hello

Been struggling with a Cisco 1120 today, no warranty left, but would like to get it running again. Tried a new disk and flashed it with tftp from rommon, also tried USB. Unit comes up with FXOS, but not able to install FTD with scope --> firmware --> auto install, not a valid package/install file. Tried different methods several times. Chatgpt informes me that I am probably using the wrong FXOS files, because I cannot boot up with the ftd *.SPA file from downloads. It this correct

Seems like I need "fxos-k8-fp1k-lfbff.2.14.1.167.SPA" for 7.4.2,  I have this on other 1120's, but cannot copy the file

Can anyone help me ?

[Cristian Matei]

Hi,

 @Jon Are Endrerud never went through this exact same scenario, however required FX-OS upgrade is bundled in the SPA file. can you closely follow this guide and if it doesn't work, post a print screen with the exact step where it breaks and the error message you're getting?

https://www.cisco.com/c/en/us/support/docs/security/firepower-1000-series/220642-reimage-a-secure-firewall-threat-defense.html

You can, of course, download the file from USB, or follow the guide as is.

Thanks,

Cristian.

[balaji.bandi]

Can you able to post complete logs - check other post can help you :

https://community.cisco.com/t5/network-security/fpr-1120-reimage-problem/m-p/5230580

[Marius Gunnerud]

If you are trying to install the FXOS and FTD separately, then that is the problem. for FTD 1000, 2000 and 3000 the FXOS is bundled with the FTD software install package.  So get the .SPA package and you should be good to go.

[Jon Are Endrerud]

 Shows the problem, this is not a corrupt image problem or SSD, this has been check out several times.

[Marius Gunnerud]

As mentioned earlier the ftd and FXOS images are bundled into the SPA file so they should be installed together. Have you tried entering «connect ftd» on the cli?

[Jon Are Endrerud]

We need the step that failes to install FTD part. Only FXOS is installed and the "install security-pack version" is to make FTD available.

Tried this in all possible ways now, also with 7.6.2 in case this was a 7.4.2 bug.

[Jon Are Endrerud]

I probably need a recover imager or something to bootstrap this device correctly, 

[Marvin Rhoads]

It appears you are stuck on step 12 of this procedure:
https://www.cisco.com/c/en/us/support/docs/security/firepower-1000-series/220642-reimage-a-secure-firewall-threat-defense.html

Did you go through the earlier steps in that procedure successfully?

[Jon Are Endrerud]

No errors I have done this several times on 1xxx and 21xx series, cant remember seeing this problem. The only thing that is new are starting with a new disk SSD (cisco). All partitions are created one first boot by fxos. Everything seems normal. Thats why I was wondering that another recover image (TAC) is needed.

[Cristian Matei]

Hi,

  @Jon Are Endrerud Based on the proved print-screen, the error message you're getting is perfectly valid. You don't have the proper image, I see by both the name and the exertion; CSP file is for 4100/9300; you need to upload the image cisco-ftd-fp1k.7.4.2-172.SPA, follow this guide further:

https://www.cisco.com/c/en/us/support/docs/security/firepower-1000-series/220642-reimage-a-secure-firewall-threat-defense.html

Thanks,

Cristian.

[Jon Are Endrerud]

I can promise you I have used the correct files, after upload this is what is listed. I have done this operation on many units, never seen this problem before. I have booted and uploaded 6.4.0/7.2.2/7.4.2/.7.6.4, started from scratch with blank SSD each time, partitions are populated and FXOS is installed. Then upload of SPA file, when «show image» this is what is listed.

Also had contact with TAC, they can not see any problem from picture.

Do you mean that the SPA file should be shown?

[Cristian Matei · Accepted solution]

Hi,

   Yes, the SPA file should be shown. Use the file I suggested and follow he document I've recommended.

Thanks,

Cristian.

[Jon Are Endrerud]

I will try again, but I have used the correct files, before upload the image file list is empty, but after the upload of the SPA file, the list is populated as shown. Will take screenshots so you can see it.

Thanks so far!

[Jon Are Endrerud]

Sorry for this post...... Just found out that if I use "show package" instead of "show image" it show the SPA file not the others. The SPA file is listed as version "7.4.2-172", if you use image it says "7.4.2.172".