cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2845
Views
0
Helpful
13
Replies

Upgrade failed for an unknown reason. Please try again ASA 5512

Dhikra Marghli
Level 5
Level 5

Hello

 

I  have  a ASA 5512X...  and i have  a problem with this command  and i use Xlight FTP  server

firepower-boot>system install ftp://admin:admin123@192.168.1.254/ftd-6.2.3-83.pkg

######################## WARNING ############################
# The content of disk0: will be erased during installation! #
#############################################################

Do you want to continue? [y/N] y
Erasing disk0 ...
Extracting ...
Verifying
Downloading
Extracting
Package Detail
Description: Cisco ASA-FTD 6.2.3-83 System Install
Requires reboot: Yes

Do you want to continue with upgrade? [y]: y
Warning: Please do not interrupt the process or turn off the system.
Doing so might leave system in unusable state.

Starting upgrade process ...
Populating new system image

Upgrade failed for an unknown reason. Please try again.
Upgrade failed. Logs can be viewed with "support view logs" command.
firepower-boot>support
firepower-boot>support view logs

===View Logs===

============================
Directory: /var/log
----------sub-dirs----------
cisco
sa
radius
-----------files------------
2005-01-01 00:40:59.675051 | 398 | install.log
2005-01-01 00:34:15.755050 | 292292 | lastlog
2005-01-01 00:41:35.645051 | 1135272 | messages
2005-01-01 00:34:15.755050 | 4608 | wtmp

([b] to go back or [s] to select a file to view, [Ctrl+C] to exit)

///////////////////////////////////////////

so, please  how i can resolve this  message error for this step  that allow me continue the next steps !!! ?

i wait a reply and a help  from expert security Cisco ASA 

 

thanks in advance 

13 Replies 13

Dhikra Marghli
Level 5
Level 5

firepower-boot>ping 192.168.1.254
PING 192.168.1.254 (192.168.1.254) 56(84) bytes of data.
64 bytes from 192.168.1.254: icmp_seq=1 ttl=128 time=0.533 ms
64 bytes from 192.168.1.254: icmp_seq=2 ttl=128 time=0.678 ms
64 bytes from 192.168.1.254: icmp_seq=3 ttl=128 time=0.628 ms
^C
--- 192.168.1.254 ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 1998ms
rtt min/avg/max/mdev = 0.533/0.613/0.678/0.060 ms

 

//////////////////////////////////////////////////////////////////////////////////////

 

firepower-boot>show interface
eth0 Link encap:Ethernet HWaddr 00:a2:ee:9d:c3:22
inet addr:192.168.1.1 Bcast:192.168.1.255 Mask:255.255.255.0
inet6 addr: fe80::2a2:eeff:fe9d:c322/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:902976 errors:0 dropped:0 overruns:0 frame:0
TX packets:355365 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:1108573617 (1.0 GiB) TX bytes:22746630 (21.6 MiB)
Interrupt:16 Memory:fb800000-fb820000

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.255.255.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:65536 Metric:1
RX packets:8 errors:0 dropped:0 overruns:0 frame:0
TX packets:8 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:552 (552.0 B) TX bytes:552 (552.0 B)

//////////////////////////////////////////////////////////////////////////

 

so Please , i wait  a solution and answer   for this problem !!

what's  the check that i use  ?,

 

thanks in advance

i wait a reply

 

best regards

check the module, make sure you have SSD ?

 

https://ccnpsecuritywannabe.blogspot.com/2019/07/reimaging-cisco-asa-5500-x-to-firepower.html

 

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

Hello

 

Thanks to reply me

 

but i can't check if have  SSD because it reboot more time and can't boot in IOS !!

 

secondo  , physically , it have  SSD  and you can see  screenshot  (  picture )

 

Booting from ROMMON

Cisco Systems ROMMON Version (2.1(9)8) #1: Wed Oct 26 17:14:40 PDT 2011

 

Use BREAK or ESC to interrupt boot.
Use SPACE to begin boot immediately.
Boot in 10 seconds.

 

so Please , what do you think about this error !!! because i try more time and i have the same error 

 

i wait your answer and your help 

 

thanks in adv

What version was the before ?

 

Turn off the device start re-imaging with different version and check ?

 

start re-image :

 

https://www.cisco.com/c/en/us/td/docs/security/firepower/quick_start/reimage/asa-ftd-reimage.html

 

 

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

Hello

i try  with other two  ios in 2017 :

 

file ftd-boot-9.8.2.3.cdisk

 

and 

system install ftp://admin:admin123@192.168.1.254/ftd-6.2.2-81.pkg

Do you want to continue? [y/N] y
Erasing disk0 ...
Extracting ...
Verifying
Downloading
Extracting
Package Detail
Description: Cisco ASA-FTD 6.2.2-81 System Install
Requires reboot: Yes

Do you want to continue with upgrade? [y]: y
Warning: Please do not interrupt the process or turn off the system.
Doing so might leave system in unusable state.

Starting upgrade process ...
Populating new system image

Upgrade failed for an unknown reason. Please try again.
Upgrade failed. Logs can be viewed with "support view logs" command.

 

so i have the same problem and the same error !!

 

what are the ios excate  for FTD  ASA 5512x  !!

 

///////////////////////////////////////////////////////////////////

> install.log
Sat Jan 1 00:15:35 UTC 2005: Begin installation ...
Found hard drive(s): /dev/sda
Erasing files from flash ...
Un-mounting partitions ...
Running [/sbin/swapoff -a] ... success

Running [/bin/dd if=/dev/zero of=/dev/sda count=4096] ... failed
/bin/dd: writing to '/dev/sda': Input/output error
1+0 records in
0+0 records out
0 bytes (0 B) copied, 0.00985043 s, 0.0 kB/s
Un-mounting partitions ...

============================
Directory: /var/log
----------sub-dirs----------
cisco
sa
-----------files------------
2005-01-01 00:15:35.034991 | 399 | install.log
2005-01-01 00:09:21.984994 | 292292 | lastlog
2005-01-01 00:24:37.394985 | 1136202 | messages
2005-01-01 00:09:21.984994 | 4608 | wtmp

([b] to go back or [s] to select a file to view, [Ctrl+C] to exit)

///////////////////////////////////////////////////////////////////////////////////////

 

i wait your reply and answer  

thanks in advance 

Also  i try  with version 2016 !!  9.6.2.0.cdisk.  ///ftd-6.1.0-330.pkg

 

 

i have the same problem ..

firepower-boot>system install ftp://admin:admin123@192.168.1.254/ftd-6.1.0-330.pkg

######################## WARNING ############################
# The content of disk0: will be erased during installation! #
#############################################################

Do you want to continue? [y/N] y
Erasing disk0 ...
Verifying
Downloading
Extracting
Package Detail
Description: Cisco ASA-FTD 6.1.0-330 System Install
Requires reboot: Yes

Do you want to continue with upgrade? [y]: y
Warning: Please do not interrupt the process or turn off the system.
Doing so might leave system in unusable state.

Starting upgrade process ...
Populating new system image

Upgrade failed for an unknown reason. Please try again.
Upgrade failed. Logs can be viewed with "support view logs" command.
firepower-boot>

******************************************

I try  with version 2018-2017-2016 ...but i have the messager error and the same problem 

so please what do you think  and what i can check  more !!

i wait your anwer

best

Can you power off the device post console output from the time device on all out out :

 

you can also look below thread :

 

https://www.techrepublic.com/article/how-to-upgrade-an-asa-5506-x-to-the-new-firepower-threat-defense-software/

 

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

Marvin Rhoads
Hall of Fame
Hall of Fame

If I understand the thread, you have an ASA 5512-X that you want to reimage with FTD software.

The overall procedure to follow is here:

https://www.cisco.com/c/en/us/td/docs/security/firepower/quick_start/reimage/asa-ftd-reimage.html#id_51368

The files required are here:

https://software.cisco.com/download/home/286271170/type/286306337/release/6.2.0

You would start with the boot image:

ftd-boot-9.7.1.4.cdisk

Then proceed in the "system install" phase using the system image:

ftd-6.2.0-363.pkg

Be sure at that point to use the image specified - not a patch like the 6.2.3 pkg file you mentioned trying. Only after you are running 6.2.0 can you patch to the latest patch (6.2.3.17 in your case).

Thanks to reply me ...BUT it is the same problem and the message error !!

 

firepower-boot>system install ftp://admin:admin123@192.168.1.254/ftd-6.2.0-363.pkg

######################## WARNING ############################
# The content of disk0: will be erased during installation! #
#############################################################

Do you want to continue? [y/N] y
Erasing disk0 ...
Extracting ...
Verifying
Downloading
Extracting
Package Detail
Description: Cisco ASA-FTD 6.2.0-363 System Install
Requires reboot: Yes

Do you want to continue with upgrade? [y]: y
Warning: Please do not interrupt the process or turn off the system.
Doing so might leave system in unusable state.

Starting upgrade process ...
Populating new system image

Upgrade failed for an unknown reason. Please try again.
Upgrade failed. Logs can be viewed with "support view logs" command.
firepower-boot>

 

so finally, i use all ios  2018-2017-2016   and your  your proposition  IOS !!

 

so please what's  do you think  about ASA 5512x  and what i can doing next step to resolve thisproblem 

 

i wait your reply and answer

best 

NicoMat
Level 1
Level 1

Hello!

I have the same issue and same messages:

> install.log
Wed Mar 30 11:23:45 UTC 2022: Begin installation ...
Found hard drive(s): /dev/sda
Erasing files from flash ...
Un-mounting partitions ...
Running [/sbin/swapoff -a] ... success

Running [/bin/dd if=/dev/zero of=/dev/sda count=4096] ... failed
/bin/dd: writing to '/dev/sda': Input/output error
3985+0 records in
3984+0 records out
2039808 bytes (2.0 MB) copied, 22.0747 s, 92.4 kB/s
Un-mounting partitions ...

 

Is no way to fix it?

Could be the SSD is damaged?

 

 

Looks for me hardware issue : (raise an TAC case for replacement)

below thread give you some reference :

 

https://community.cisco.com/t5/network-security/failed-firepower-module-installation-for-5506-x/td-p/4299238

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

Hi!

Yes, you're right, I'll raise an TAC case for replacement.

Thank you!

 

Review Cisco Networking for a $25 gift card