not able to launch Cisco ASDM launcher

Unanswered Question
Jun 5th, 2008

we have 2 firewalls, which grouped together as active/active failover pattern with 2 contexts: admin and Ctx1: we are able to launch asdm either by ASDM launcher or web based for FW1, which is active for admin, but when we tried launching fw2 which is active for Ctx1, we received a error message:the device does not have the appropriate Device Manager image installed. ASDM Launcher supports ASDM 5.0 or higher."

But when I console into every firewall: I saw the ASDM version is 521 for every FW:

10 -rw- 8202240 00:05:14 Jan 01 2003 asa721-k8.bin

11 -rw- 1868412 00:05:40 Jan 01 2003 securedesktop-asa-3.1.1.29-k9.pkg

12 -rw- 398305 00:05:54 Jan 01 2003 sslclient-win-1.1.0.154.pkg

13 -rw- 5539756 07:35:10 Dec 12 2006 asdm-521.bin

16 -rw- 1926 20:53:14 Feb 04 2007 old_running.cfg

17 -rw- 19772 00:57:00 Jun 05 2008 admin.cfg

18 -rw- 1509 23:12:18 Feb 04 2007 Ctx1.cfg

19 -rw- 20012 01:00:36 Jun 05 2008 ctx.cfg

I donot think it is ASDM version issue, i think it is because of context issue, when I changed to different context I got different result:

admin:

SINFWL001/admin# sh asdm ?

history Show contents of Device Manager history buffer

log_sessions Show current Device Manager logging sessions

sessions Show current Device Manager sessions

SINFWL001/admin# sh asdm his

SINFWL001/admin# sh version

Cisco Adaptive Security Appliance Software Version 7.2(1) <context>

Compiled on Wed 31-May-06 14:45 by root

SINFWL001 up 279 days 22 hours

failover cluster up 279 days 22 hours

Hardware: ASA5520-K8, 512 MB RAM, CPU Pentium 4 Celeron 2000 MHz

Internal ATA Compact Flash, 256MB

BIOS Flash AT49LW080 @ 0xffe00000, 1024KB

Encryption hardware device : Cisco ASA-55x0 on-board accelerator (revision 0x0)

Boot microcode : CNlite-MC-Boot-Cisco-1.2

SSL/IKE microcode: CNlite-MC-IPSEC-Admin-3.03

IPSec microcode : CNlite-MC-IPSECm-MAIN-2.04

0: Ext: GigabitEthernet0/0 : address is 000a.b89c.e1f6, irq 9

1: Ext: GigabitEthernet0/1 : address is 000a.b89c.e1f7, irq 9

2: Ext: GigabitEthernet0/2 : address is 000a.b89c.e1f8, irq 9

3: Ext: GigabitEthernet0/3 : address is 000a.b89c.e1f9, irq 9

4: Ext: Management0/0 : address is 000a.b89c.e1fa, irq 11

5: Int: Not licensed : irq 11

6: Int: Not licensed : irq 5

Licensed features for this platform:

Maximum Physical Interfaces : Unlimited

Maximum VLANs : 100

Inside Hosts : Unlimited

Failover : Active/Active

VPN-DES : Enabled

VPN-3DES-AES : Enabled

Security Contexts : 2

GTP/GPRS : Disabled

VPN Peers : 750

WebVPN Peers : 2

This platform has an ASA 5520 VPN Plus license.

Serial Number: JMX1xxxxxx

Running Activation Key: 0xad222b69 0x847111d2 0xfce31da0 0xa7c080d0 0x4bsss6b0

Configuration register is 0x1

Configuration last modified by enable_1 at 00:56:50.297 UTC Thu Jun 5 2008

while in Ctx1:

SINFWL001/Ctx1(config)# sh ver

Cisco Adaptive Security Appliance Software Version 7.2(1) <context>

Compiled on Wed 31-May-06 14:45 by root

SINFWL001 up 279 days 22 hours

failover cluster up 279 days 22 hours

Hardware: ASA5520-K8

Licensed features for this user context:

Failover : Active/Active

VPN-DES : Enabled

VPN-3DES-AES : Enabled

GTP/GPRS : Disabled

Configuration last modified by JMHfzco at 01:00:27.935 UTC Thu Jun 5 2008

how can i use ASDM for Ctx1?

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.

Actions

This Discussion