cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
571
Views
0
Helpful
0
Replies

crash ESP5 card on ASR 1002 with log file

pinie0001
Level 1
Level 1

Hello Everybody!

my costumer has a ASR1002 with ESP5.

befor 3 weeks we got a crash on the ASR.

while the crash, the ASR Interface's was state to down and after 1 munites the interfaces state to UP.

no reset occured on the asr while crashing.

we got the bellow logs:

Feb 25 14:24:49 Israel: %IMGR-0-FIPS_FMFP_N2_SEVERE_ERR_FAIL: F0: fman_fp_image: 
Cryptographic coprocessor severe failure: RSA operation error .

Feb 25 14:24:50 Israel: %ASR1000_OIR-6-OFFLINECARD: Card (fp) offline in slot F0

Feb 25 14:24:50 Israel: %ASR1000_RP_ALARM-6-INFO: ASSERT MAJOR module F0 Unknown state

Feb 25 14:24:50 Israel: %ASR1000_RP_ALARM-6-INFO: ASSERT CRITICAL module R0 No Working ESP

Feb 25 14:25:48 Israel: %CPPHA-3-FAULT: F0: cpp_ha:  CPP:0 desc:CPP Client process failed:
FMAN-FP det:HA class:CLIENT_SW sev:FATAL id:1 cppstate:RUNNING res:UNKNOWN
flags:0x0 cdmflags:0x0

Feb 25 14:25:48 Israel: %IOSXE-6-PLATFORM: F0: cpp_ha: Shutting down CPP MDM while client(s)
still connected

Feb 25 14:25:48 Israel: %PMAN-3-PROCHOLDDOWN: F0: pman.sh:  The process fman_fp_image has been
helddown (rc 134)

Feb 25 14:25:48 Israel: %PMAN-3-PROCHOLDDOWN: F0: pman.sh:  The process cpp_ha_top_level_server
has been helddown (rc 69)

Feb 25 14:25:48 Israel: %PMAN-0-PROCFAILCRIT: F0: pvp.sh:  A critical process fman_fp_image
has failed (rc 134)

Feb 25 14:26:06 Israel: %ASR1000_RP_ALARM-6-INFO: CLEAR MAJOR module F0 Unknown state
Feb 25 14:26:06 Israel: %ASR1000_RP_ALARM-6-INFO: ASSERT MAJOR module F0 Disabled
Feb 25 14:26:07 Israel: %ASR1000_RP_ALARM-6-INFO: CLEAR MAJOR module F0 Disabled
Feb 25 14:26:07 Israel: %ASR1000_RP_ALARM-6-INFO: ASSERT MAJOR module F0 Boot state

 

----------------

additionaly, crash file was created on the flash (zil56-wr1_ESP_0_fman_fp_image_6161.core.gz) but the inside vore file is unreadable.

 

i read some articls about same problem but i dont found something with the same reason.

for example, in the below articls the problem occure in boot level:

http://www.cisco.com/c/en/us/support/docs/field-notices/637/fn63764.html

 

we dont use ipsec or fips mode.

 

attached here the crash file, show ver and show inventory.

the crash file change from .gz to .zip

somebody met problem like this?

somebody have a recommand or some test's to do?

 

Thanks

Pini Elbaz

0 Replies 0
Review Cisco Networking for a $25 gift card