SFR is in Recovery Mode

[hasanul.kabir]

Dear all, 

i have a situation as mentioned below.

• I have two ASA 5525 in Active-Standby mode
• I have installed firesight Successfully.
• Situation is when i would like to go "Session sfr" for cli mode. it gives me a syslog massage which is "sfr is not responding the for this session". moreover when i typed "sh module" in cli mode i found that SFR is in "Recovery" mode. after that i stopped the Recovery mode and try to reboot the sfr. but it remains in Recovery mode.

need suggestion.

[emmanuel.mbanda]

How long can this process take, l have been waiting for 2hours now but no lucky. From the logs its showing that the module installation is complete. 

Please help

Configuring update-modules
INIT: Entering runlevel: 5
Starting OpenBSD Secure Shell server: sshd
generating ssh RSA key...
generating ssh DSA key...
done.
Starting Advanced Configuration and Power Interface daemon: acpid.
acpid: starting up with proc fs

acpid: opendir(/etc/acpi/events): No such file or directory

starting Busybox inetd: inetd... done.
Starting ntpd: done
Starting syslogd/klogd: done
Cisco FirePOWER Services Boot Image 6.2.0

asasfr login: [ 418.624687] vda: vda1
[ 422.635745] Adding 4194752k swap on /dev/vda1. Priority:-1 extents:1 across:4194752k
[ 903.800054] kjournald starting. Commit interval 5 seconds
[ 903.801672] EXT3 FS on vda5, internal journal
[ 903.802162] EXT3-fs: mounted filesystem with ordered data mode.
[ 903.842924] kjournald starting. Commit interval 5 seconds
[ 903.843632] EXT3 FS on sda1, internal journal
[ 903.844178] EXT3-fs: mounted filesystem with ordered data mode.
INIT: Switching to runlevel: 6
INIT: Sending processes the TERM signal
Stopping OpenBSD Secure Shell server: sshdstopped /usr/sbin/sshd (pid 1991)
.
Stopping Advanced Configuration and Power Interface daemon: no /usr/sbin/acpid found; none killed
stopping Busybox inetd: inetd... stopped inetd (pid 1999)
done.
Stopping ntpd: stopped process in pidfile '/var/run/ntp.pid' (pid 2110)
done
Stopping syslogd/klogd: done
Deconfiguring network interfaces... done.
Sending all processes the TERM signal...
Sending all processes the KILL signal...
Unmounting remote filesystems...
Deactivating swap...
Unmounting local filesystems...
umount2: Device or resource busy
umount: none busy - remounted read-only
Rebooting... [ 1169.182952] md: stopping all md devices.
[ 1170.283057] sd 0:0:0:0: [sda] Synchronizing SCSI cache
[ 1170.475972] Restarting system.
[ 1170.476333] machine restart

***
*** EVENT: The module is being automatically restarted.
*** TIME: 13:43:33 SAST Nov 1 2018
***

[EngSaidy]

Dear sir,  
I uploaded (asasfr-5500x-boot-6.2.3-4.img) image file from TFTP to ASA flash memory, then run execute the following commands:

SW-module module sfr recover configure image disk0:asasfr-5500x-boot-6.2.3-4.img 
SW-module module sfr recover boot

Then, Cisco FirePOWER Services Boot Image 6.2.3 debug was finally displayed.
As I logged in to SFR console, set up all the IP configuration for device and run System install ftp://10.29.85.20/asasfr-sys-6.2.3-83.pkg 

When the extraction completed, the device stucks in recover state, and I can no longer log in to SFR console, please help me on this regard.

Thanks,

[Marvin Rhoads]

How long did you wait? It can take several hours.

[Filip Gerasimov]

Hi my sfr module is stuck in init state. Is there any chance to start recovering of sfr module and then to stop it without to erase the configuration. My idea is sfr go in unresponsive state and then to shutdown / reset / reload. 

[Marvin Rhoads]

init state is what we normally see during the process of imaging. You first boot the module with the new image and then wait for it to present you with a login prompt. At this point the module will be in "init". You then download and install the system image to complete the process and move to "Up/Up" state.

You can have a look at your module's log from the ASA cli. I usually do the following:

term pager 0
show module sfr log console

It should be a long string of log messages ending with a login prompt.