Just nu i M3-nätverket
Gå till innehåll

Cisco asa 5505


mille

Rekommendera Poster

Hej

 

Fick en cisco asa 5505 för någon dag sedan. Tänkte köra en uppdatering till asa 8.05 och asdm 6.2

Men nu har jag klantat mig på något sett. Router startar inte upp. Får felmedelande:

Cannot find disk0:/asdm-622-53.bin

 

Jag kommer in i rommon men jag har inte så stor koll på cisco routrar.

Finns det något sett att återställa till asa-724 och asdm-5.x från rommon?

 

Har letat som en tok på internet men hittar inget, eller det jag har hittat fungerar inte.

Ex http://www.cisco.com/en/US/docs/security/asdm/6_1/user/guide/trouble.html hjälper inte.

 

 

Nån som kan hjälpa mig?

 

//mille

Länk till kommentar
Dela på andra webbplatser

MatteusDeGothia

Tjena!

 

Hur insatt är du i Cisco´s utrustningar?? ASA är ju ingen router utan en "Brandvägg" och har inte riktigt samma ios kommando! Vad innehåller din flash disk?

 

Mvh Martin

Länk till kommentar
Dela på andra webbplatser

Tjena!

 

Hur insatt är du i Cisco´s utrustningar?? ASA är ju ingen router utan en "Brandvägg" och har inte riktigt samma ios kommando! Vad innehåller din flash disk?

 

Mvh Martin

 

Hej

 

Jag är inte särskilt instatt i Cisco.

Det är ett problem att jag bara kommer i rommon. Där tror jag inte alla IOS kommando fungerar, ex dir disk0. Så jag har lite svårt att se vad som finns på flashdisken.

Hela bootsekvensen:

CISCO SYSTEMS
Embedded BIOS Version 1.0(12)13 08/28/08 15:50:37.45

Low Memory: 632 KB
High Memory: 507 MB
PCI Device Table.
Bus Dev Func VendID DevID Class              Irq
00  01  00   1022   2080  Host Bridge
00  01  02   1022   2082  Chipset En/Decrypt 11
00  0C  00   1148   4320  Ethernet           11
00  0D  00   177D   0003  Network En/Decrypt 10
00  0F  00   1022   2090  ISA Bridge
00  0F  02   1022   2092  IDE Controller
00  0F  03   1022   2093  Audio              10
00  0F  04   1022   2094  Serial Bus         9
00  0F  05   1022   2095  Serial Bus         9

Evaluating BIOS Options ...
Launch BIOS Extension to setup ROMMON

Cisco Systems ROMMON Version (1.0(12)13) #0: Thu Aug 28 15:55:27 PDT 2008
i2c_read_word_w_wait() error, slot = 0x0, device = 0x64, address = 134 byte count = 2. Reason: I2C_UNPOPULATED_ERROR

Platform ASA5505

Use BREAK or ESC to interrupt boot.
Use SPACE to begin boot immediately.
Boot interrupted.

Ethernet0/0
i2c_write_byte_w_wait() error, slot = 0x0, device = 0x64, address = 128 byte count = 1. Reason: I2C_UNPOPULATED_ERROR
esw_reg_read: i2c_write_byte_w_wait(0) returned 0x6
Ethernet port 0 could not be initialized.


Default Interface number-0 Not Up


Use ? for help.
rommon #0> 

 

 

Om jag i rommon skriver boot asa805-k8.bin får jag följande:

 

rommon #4> boot asa805-k8.bin
Launching BootLoader...
Boot configuration file contains 2 entries. 

Loading asa805-k8.bin... Booting...
Loading...
Processor memory 451350528, Reserved memory: 41943040 (DSOs: 0 + kernel: 41943040)
Guest RAM start: 0xc5000080
Guest RAM   end: 0xdd400000
Guest RAM   brk: 0xc5001000

IO memory 39403520 bytes
IO memory start: 0xc27f9000
IO memory   end: 0xc4d8d000

Total SSMs found: 0

Total NICs found: 10 

 

Jag tror att jag bara vill ha 1 entry i bootloader.

Har jag fel?

Kan man lösa det från rommon?

 

//mille

Länk till kommentar
Dela på andra webbplatser

MatteusDeGothia

Tjena!

 

Jag har bara gjort det via ASDM och aldrig via rommon! Har du kvar 7.22 bin filen? TFTP´a in den igen och gör upgrade via ASDM. Prova detta!

 

Dator:<br style="line-height: 1.4 !important; ">1. ip address: 10.10.10.2<br style="line-height: 1.4 !important; ">2. mask: 255.0.0.0<br style="line-height: 1.4 !important; ">3. no default-gateway set<br style="line-height: 1.4 !important; ">4. asa-724.bin file in C:\TFTP-Root

5. tftp service is running<br style="line-height: 1.4 !important; ">6. software firewall turned off<br style="line-height: 1.4 !important; ">7. str-through cable to asa eth0/0<br style="line-height: 1.4 !important; "><br style="line-height: 1.4 !important; "><br style="line-height: 1.4 !important; ">Firewall:<br style="line-height: 1.4 !important; ">1. rommon #0> PORT=Ethernet0/0<br style="line-height: 1.4 !important; ">Ethernet0/0<br style="line-height: 1.4 !important; ">Link is UP<br style="line-height: 1.4 !important; ">MAC Address: xxxxxxxxxxx<br style="line-height: 1.4 !important; ">2. rommon #1> ADDRESS=ip adress på ASA<br style="line-height: 1.4 !important; ">3. rommon #2> SERVER=ip adress på din dator<br style="line-height: 1.4 !important; ">4. rommon #3> GATEWAY=ip adress på din dator<br style="line-height: 1.4 !important; ">5. rommon #4> IMAGE=asdm-622-53.bin <br style="line-height: 1.4 !important; ">6. rommon #5> tftp<br style="line-height: 1.4 !important; ">

Mvh Martin

Jag har tyvärr inte tillgång till någon ASA för tillfället!

Länk till kommentar
Dela på andra webbplatser

Tjena!

 

Jag har bara gjort det via ASDM och aldrig via rommon! Har du kvar 7.22 bin filen? TFTP´a in den igen och gör upgrade via ASDM. Prova detta!

 

Dator:<br style="line-height: 1.4 !important; ">1. ip address: 10.10.10.2<br style="line-height: 1.4 !important; ">2. mask: 255.0.0.0<br style="line-height: 1.4 !important; ">3. no default-gateway set<br style="line-height: 1.4 !important; ">4. asa-724.bin file in C:\TFTP-Root

5. tftp service is running<br style="line-height: 1.4 !important; ">6. software firewall turned off<br style="line-height: 1.4 !important; ">7. str-through cable to asa eth0/0<br style="line-height: 1.4 !important; "><br style="line-height: 1.4 !important; "><br style="line-height: 1.4 !important; ">Firewall:<br style="line-height: 1.4 !important; ">1. rommon #0> PORT=Ethernet0/0<br style="line-height: 1.4 !important; ">Ethernet0/0<br style="line-height: 1.4 !important; ">Link is UP<br style="line-height: 1.4 !important; ">MAC Address: xxxxxxxxxxx<br style="line-height: 1.4 !important; ">2. rommon #1> ADDRESS=ip adress på ASA<br style="line-height: 1.4 !important; ">3. rommon #2> SERVER=ip adress på din dator<br style="line-height: 1.4 !important; ">4. rommon #3> GATEWAY=ip adress på din dator<br style="line-height: 1.4 !important; ">5. rommon #4> IMAGE=asdm-622-53.bin <br style="line-height: 1.4 !important; ">6. rommon #5> tftp<br style="line-height: 1.4 !important; ">

Mvh Martin

Jag har tyvärr inte tillgång till någon ASA för tillfället!

 

 

Jo jag har kvar 722.bin filen på disken men vet inte rikgigt hur jag gör så att den bootar från den.

 

Kan men ställa in det nånstans?

Länk till kommentar
Dela på andra webbplatser

MatteusDeGothia

Tjena!

 

Har du provat att skriva "boot asa722-kx.bin" i rommon läge??

Mvh Martin

Länk till kommentar
Dela på andra webbplatser


CISCO SYSTEMS 

Embedded BIOS Version 1.0(12)13 08/28/08 15:50:37.45


Low Memory: 632 KB

High Memory: 507 MB

PCI Device Table.

Bus Dev Func VendID DevID Class              Irq

00  01  00   1022   2080  Host Bridge        

00  01  02   1022   2082  Chipset En/Decrypt 11

00  0C  00   1148   4320  Ethernet           11

00  0D  00   177D   0003  Network En/Decrypt 10

00  0F  00   1022   2090  ISA Bridge         

00  0F  02   1022   2092  IDE Controller     

00  0F  03   1022   2093  Audio              10

00  0F  04   1022   2094  Serial Bus         9

00  0F  05   1022   2095  Serial Bus         9


Evaluating BIOS Options ...

Launch BIOS Extension to setup ROMMON


Cisco Systems ROMMON Version (1.0(12)13) #0: Thu Aug 28 15:55:27 PDT 2008
i2c_read_word_w_wait() error, slot = 0x0, device = 0x64, address = 134 byte count = 2. Reason: I2C_UNPOPULATED_ERROR

Platform ASA5505
Ethernet0/0
i2c_write_byte_w_wait() error, slot = 0x0, device = 0x64, address = 128 byte count = 1. Reason: I2C_UNPOPULATED_ERROR
esw_reg_read: i2c_write_byte_w_wait(0) returned 0x6
Ethernet port 0 could not be initialized.


Default Interface number-0 Not Up


Use ? for help.
rommon #0> confreg

Current Configuration Register: 0x00000000
Configuration Summary: 
 boot ROMMON

Do you wish to change this configuration? y/n [n]: n

rommon #1> confreg 0x41

Update Config Register (0x41) in NVRAM...

rommon #2> boot asa724-k8.bin
Launching BootLoader...
Boot configuration file contains 2 entries.


Loading asa724-k8.bin... Booting...
##########################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################
512MB RAM

Total SSMs found: 0

Total NICs found: 10
i2c_write_byte_w_suspend() error, slot = 0x0, device = 0x64, address = 128 byte count = 1. Reason: I2C_UNPOPULATED_ERROR
esw_init_startup_info(): Unable to obtain device info.
f rev  Gigabit Ethernet @ index 09 MAC: 0000.0003.0002
f rev  Ethernet @ index 08 MAC: 5475.d0f0.8c5f
f rev  Ethernet @ index 07 MAC: 5475.d0f0.8c5e
f rev  Ethernet @ index 06 MAC: 5475.d0f0.8c5d
f rev  Ethernet @ index 05 MAC: 5475.d0f0.8c5c
f rev  Ethernet @ index 04 MAC: 5475.d0f0.8c5b
f rev  Ethernet @ index 03 MAC: 5475.d0f0.8c5a
f rev  Ethernet @ index 02 MAC: 5475.d0f0.8c59
f rev  Ethernet @ index 01 MAC: 5475.d0f0.8c58
y88acs06 rev16 Gigabit Ethernet @ index 00 MAC: 5475.d0f0.8c60

Licensed features for this platform:
Maximum Physical Interfaces : 8         
VLANs                       : 3, DMZ Restricted
Inside Hosts                : 10        
Failover                    : Disabled
VPN-DES                     : Enabled   
VPN-3DES-AES                : Enabled   
VPN Peers                   : 10        
WebVPN Peers                : 2         
Dual ISPs                   : Disabled  
VLAN Trunk Ports            : 0         

This platform has a Base license.

Encryption hardware device : Cisco ASA-5505 on-board accelerator (revision 0x0)
                            Boot microcode   : CNlite-MC-Boot-Cisco-1.2
                            SSL/IKE microcode: CNlite-MC-IPSEC-Admin-3.03
                            IPSec microcode  : CNlite-MC-IPSECm-MAIN-2.05
i2c_read_word_w_suspend() error, slot = 0x0, device = 0x64, address = 134 byte count = 2. Reason: I2C_UNPOPULATED_ERROR
imb_upgrade_thread: IMB in slot 0 is version 0.0
imb_upgrade_thread: IMB in slot 0 is being upgraded to 1.7
IMBFS: Updating the IMB to v1.7. Please wait...
i2c_write_block_w_suspend() error, slot = 0x0, device = 0x64, address = 136 byte count = 8. Reason: I2C_UNPOPULATED_ERROR
IMBFS: I2C error 6 writing block to IMB image buffer
Panic: imb_upgrade_thread - imb_upgrade_thread: Error writing IMB upgrade image to slot 0.

Thread Name: imb_upgrade_thread (Old pc 0x010cb082 ebp 0x01b3b4e8)
   vector 0x00000003 (breakpoint)
      edi 0x00000002
      esi 0x01750420
      ebp 0x01b3b4a8
      esp 0x01b3b49c
      ebx 0x01b3b4e0
      edx 0x0000000a
      ecx 0x0007a120
      eax 0x0000003f
error code n/a
      eip 0x010c17ac
       cs 0x00000008
   eflags 0x00000246
      CR2 0x00000000

Cisco Adaptive Security Appliance Software Version 7.2(4) 

Compiled on Sun 06-Apr-08 13:39 by builders
Crashinfo collected on 11:40:39.920 UTC Wed Jul 7 2010

Traceback:
0: 0010f0ba
1: 001116b5
2: 001118d0
3: 00118727
4: 005ca233
5: 0011544f
Stack dump: base:0x01b37668 size:16384, active:588
entries above '==': return PC preceded by input parameters
entries below '==': local variables followed by saved regs
            '==Fn': stack frame n, contains next stack frame
               '*': stack pointer at crash
For example:
   0xeeeeef00: 0x005d0707     : arg3
   0xeeeeeefc: 0x00000159     : arg2
   0xeeeeeef8: 0x005d0722     : arg1
   0xeeeeeef4: 0x005d1754     : return PC
   0xeeeeeef0: 0xeeeeef20 ==F2: stack frame F2
   0xeeeeeeec: 0x00def9e0     : local variable
   0xeeeeeee8: 0x0187df9e     : local variable or saved reg
   0xeeeeeee4: 0x01191548     : local variable or saved reg
   0xeeeeeee0: 0x014dde20     : local variable or saved reg
0x01b3b664: 0x00000000
0x01b3b660: 0x005ca0d0
0x01b3b65c-0x01b3b658: 0x00000000 ==F4
0x01b3b654: 0x12345678
0x01b3b650: 0x00000000
0x01b3b64c: 0x0011544f
0x01b3b648: 0x01b3b658 ==F3
0x01b3b644-0x01b3b63c: 0x00000000
0x01b3b638: 0x00000520
0x01b3b634-0x01b3b620: 0x12345678
0x01b3b61c: 0x00302f73
0x01b3b618: 0x66626d69
0x01b3b614-0x01b3b608: 0x12345678
0x01b3b604: 0x00000000
0x01b3b600: 0x005ca024
0x01b3b5fc: 0x00000020
0x01b3b5f8: 0x00000000
0x01b3b5f4: 0x005c9fc0
0x01b3b5f0: 0x005ca064
0x01b3b5ec: 0x005ca233
0x01b3b5e8: 0x01b3b648 ==F2
0x01b3b5e4: 0x00000000
0x01b3b5e0: 0x01b3b5f4
0x01b3b5dc: 0x00000000
0x01b3b5d8: 0x00000020
0x01b3b5d4: 0x00000000
0x01b3b5d0: 0x01750420
0x01b3b5cc: 0x00118e8e
0x01b3b5c8: 0x01b3b5e8
0x01b3b5c4: 0x01750420
0x01b3b5c0: 0x017239f0
0x01b3b5bc: 0x00118779
0x01b3b5b8: 0x01b3b5c8
0x01b3b5b4: 0x00000002
0x01b3b5b0: 0x00000000
0x01b3b5ac: 0x01750420
0x01b3b5a8: 0x00118779
0x01b3b5a4-0x01b3b5a0: 0x00000020
0x01b3b59c: 0x00000000
0x01b3b598: 0x00000002
0x01b3b594: 0x00000000
0x01b3b590: 0x017239f0
0x01b3b58c: 0x010a6355
0x01b3b588: 0x01b3b5b8
0x01b3b584: 0x00000000
0x01b3b580: 0x017239f0
0x01b3b57c: 0x00000002
0x01b3b578-0x01b3b574: 0x00000000
0x01b3b570: 0x00000008
0x01b3b56c: 0x00000006
0x01b3b568: 0x88000088
0x01b3b564: 0x00000008
0x01b3b560: 0x00000020
0x01b3b55c: 0x00b14e7f
0x01b3b558: 0x01b3b588
0x01b3b554: 0x00000002
0x01b3b550: 0x00000003
0x01b3b54c: 0x00b14b4f
0x01b3b548: 0x01b3b558
0x01b3b544: 0x00000002
0x01b3b540: 0x014ae0c8
0x01b3b53c: 0x01b45458
0x01b3b538: 0x00000001
0x01b3b534: 0x00000838
0x01b3b530: 0x00000000
0x01b3b52c: 0x009120f4
0x01b3b528: 0x01b3b548
0x01b3b524: 0x00000000
0x01b3b520: 0x0167acf8
0x01b3b51c: 0x000a2e30
0x01b3b518: 0x20746f6c
0x01b3b514: 0x73206f74
0x01b3b510: 0x20656761
0x01b3b50c: 0x6d692065
0x01b3b508: 0x64617267
0x01b3b504: 0x70752042
0x01b3b500: 0x4d492067
0x01b3b4fc: 0x6e697469
0x01b3b4f8: 0x72772072
0x01b3b4f4: 0x6f727245
0x01b3b4f0: 0x203a6461
0x01b3b4ec: 0x65726874
0x01b3b4e8: 0x5f656461
0x01b3b4e4: 0x72677075
0x01b3b4e0: 0x5f626d69
0x01b3b4dc: 0x000001f4
0x01b3b4d8: 0x13000037
0x01b3b4d4: 0x00000001
0x01b3b4d0: 0x0000000a
0x01b3b4cc: 0x72656666
0x01b3b4c8: 0x01b3b5f4
0x01b3b4c4: 0x00000001
0x01b3b4c0: 0x005ca064
0x01b3b4bc: 0x00000100
0x01b3b4b8-0x01b3b4b4: 0x01b3b4e0
0x01b3b4b0: 0x0011831e
0x01b3b4ac: 0x00118727
0x01b3b4a8: 0x01b3b5e8 ==F1
0x01b3b4a4: 0x00000246
0x01b3b4a0: 0x00000008
0x01b3b49c: 0x010c17ac *
0x01b3b498: 0x0000003f
0x01b3b494: 0x0007a120
0x01b3b490: 0x0000000a
0x01b3b48c: 0x01b3b4e0
0x01b3b488: 0x01b3b49c
0x01b3b484: 0x01b3b4a8
0x01b3b480: 0x01750420
0x01b3b47c: 0x00000002
0x01b3b478: 0x00000003
0x01b3b474: 0x001118d0
0x01b3b470: 0x01b3b4a8
0x01b3b46c: 0x00000002
0x01b3b468: 0x01750420
0x01b3b464: 0x01b3b4e0
0x01b3b460: 0x00000246
0x01b3b45c: 0x00000008
0x01b3b458: 0x010c17ac
0x01b3b454: 0x0000003f
0x01b3b450: 0x0007a120
0x01b3b44c: 0x0000000a
0x01b3b448: 0x01b3b4e0
0x01b3b444: 0x01b3b49c
0x01b3b440: 0x01b3b4a8
0x01b3b43c: 0x01750420
0x01b3b438: 0x00000002
0x01b3b434: 0x00000003
0x01b3b430: 0x0000000d
0x01b3b42c: 0x00114f94
0x01b3b428: 0x01b3b458
0x01b3b424: 0x01b3b4e8
0x01b3b420: 0x010cb082
0x01b3b41c: 0x005ca28a

Begin to dump crashinfo to flash....


-----------------------------------------------
Traceback output aborted.
Flushing first exception frame:
   vector 0x00000003 (breakpoint)
      edi 0x00000002
      esi 0x01750420
      ebp 0x01b3b4a8
      esp 0x01b3b49c
      ebx 0x01b3b4e0
      edx 0x0000000a
      ecx 0x0007a120
      eax 0x0000003f
error code n/a
      eip 0x010c17ac
       cs 0x00000008
   eflags 0x00000246
      CR2 0x00000000
Nested traceback attempted via interrupt, from:
   vector 0x0000000e (page fault)
      edi 0x00000000
      esi 0x01b3af0d
      ebp 0x01b3aed0
      esp 0x01b3ae98
      ebx 0x00000007
      edx 0x00000000
      ecx 0x00000000
      eax 0x01b3af0d
error code 0x00000000
      eip 0x010c547e
       cs 0x00000008
   eflags 0x00010297
      CR2 0x00000000

Cisco Adaptive Security Appliance Software Version 7.2(4) 

Compiled on Sun 06-Apr-08 13:39 by builders
Crashinfo collected on 11:40:42.570 UTC Wed Jul 7 2010

Traceback:
0: 0010f0ba
1: 0010f174
2: 0010f204
3: 0011184f
4: 001118d0
5: 009db2b1
6: 009db5e0
7: 0097083a
8: 00111151
9: 00111780
10: 001118d0
11: 00118727
12: 005ca233
13: 0011544f
-----------------------------------------------




Rebooting....



CISCO SYSTEMS 

Embedded BIOS Version 1.0(12)13 08/28/08 15:50:37.45


Low Memory: 632 KB

High Memory: 507 MB

PCI Device Table.

Bus Dev Func VendID DevID Class              Irq

00  01  00   1022   2080  Host Bridge        

00  01  02   1022   2082  Chipset En/Decrypt 11

00  0C  00   1148   4320  Ethernet           11

00  0D  00   177D   0003  Network En/Decrypt 10

00  0F  00   1022   2090  ISA Bridge         

00  0F  02   1022   2092  IDE Controller     

00  0F  03   1022   2093  Audio              10

00  0F  04   1022   2094  Serial Bus         9

00  0F  05   1022   2095  Serial Bus         9


Evaluating BIOS Options ...

Launch BIOS Extension to setup ROMMON


Cisco Systems ROMMON Version (1.0(12)13) #0: Thu Aug 28 15:55:27 PDT 2008
i2c_read_word_w_wait() error, slot = 0x0, device = 0x64, address = 134 byte count = 2. Reason: I2C_UNPOPULATED_ERROR

Platform ASA5505


Use BREAK or ESC to interrupt boot.

Use SPACE to begin boot immediately.

Boot in 10 seconds.           9 seconds.          8 seconds.          7 seconds.          6 seconds.          5 seconds.          4 seconds.          3 seconds.          2 seconds.          1 seconds.


Launching BootLoader...
Boot configuration file contains 2 entries.

Cannot find disk0:/asdm-625-53.bin

Error 15: File not found

Loading disk0:/asa805-k8.bin... Booting...
Loading...
À
Processor memory 451338240, Reserved memory: 41943040 (DSOs: 0 + kernel: 41943040)
Guest RAM start: 0xc5000080
Guest RAM   end: 0xdd400000
Guest RAM   brk: 0xc5001000

IO memory 39403520 bytes
IO memory start: 0xc27f9000
IO memory   end: 0xc4d8d000

Total SSMs found: 0

Total NICs found: 10

 

Och efter det så händer inget mer. Eller lampan Active lyser på brandväggen.

gjorde enligt https://cisco.com/en/US/docs/securit...html#wp1058131

 

Ville du att jag bara skulle skriva boot asa724-k8.bin?

Det blir samma resultat.

 

Nåt annat tips på vad jag kan göra?

 

//simon6

Länk till kommentar
Dela på andra webbplatser

Arkiverat

Det här ämnet är nu arkiverat och är stängt för ytterligare svar.

×
×
  • Skapa nytt...