Solved: ASA5525

nasser2002_2005 · ‎06-26-2017

can some please help me with this issue ?

asasfr-boot>system install ftp://10.30.2.40/asasfr-sys-6.2.0-362.pkg

Verifying

111
Upgrade aborted.

ASA-5525-1(config)# SH RUN BOOT

boot system disk0:/asa981-smp-k8.bin
boot system disk0:/asasfr-5500x-boot-6.2.0-2.img
boot system disk0:/asasfr-sys-6.2.0-362

thanks

Marvin Rhoads · ‎06-28-2017

The references you are citing about 6.0 and 5.3 etc. are for upgrades. You are not doing an inline upgrade but instead building a new image. When re-imaging, the boot image (img file) must match the version of the system image (img file).

I don't know how you got to the initial condition. It is probably best to start over with a module uninstall:

sw-module module sfr uninstall

...and then and follow the following procedure exactly while using the version 6.2.0 files:

http://www.cisco.com/c/en/us/td/docs/security/firepower/quick_start/reimage/asa-ftd-reimage.html#id_51507

I have several such re-images and never encountered any problem.

View solution in original post

Marvin Rhoads · ‎06-26-2017

You're mixing the sfr (FirePOWER) module and ASA software commands. The "boot system" commands should not be used for the "asasfr..." images.

To show the version and status of the sfr (FirePOWER) module, you would use the "show module sfr detail" command.

The "system install" command is to install the full FirePOWER module software from the "asasfr-boot" prompt in the partially initialized module as you show.

Given that your bootstrap image was asasfr-5500x-boot-6.2.0-2.img, you should be using the system software "asasfr-sys-6.2.0-362.pkg" and then, from the GUI, upgrade it to patch 6.2.0.2.

nasser2002_2005 · ‎06-27-2017

thank you for your respond,

i have new device and already update the ASA and ASDM. and i downloaded the FirePOWER image. Now i tired to download the pkg from asasfr mode file it shows the below massage

Verifying

111
Upgrade aborted.

the show version command shows that i have firepower :

Firepower Extensible Operating System Version 2.2(1.47)

and i want to download 6.2.0

Marvin Rhoads · ‎06-27-2017

Please share the output of:

show module sfr detail

nasser2002_2005 · ‎06-27-2017

sh module sfr details

Getting details from the Service Module, please wait...
Unable to read details from module sfr

Card Type: Unknown
Model: N/A
Hardware version: N/A
Serial Number:
Firmware version: N/A
Software version:
MAC Address Range: 00a3.8ecf.c864 to 00a3.8ecf.c864
Data Plane Status: Not Applicable
Console session: Ready
Status: Recover

Marvin Rhoads · ‎06-27-2017

OK, we would expect that status since your module is in recovery mode.

Please confirm the MD5 checksum of the file "asasfr-sys-6.2.0-362.pkg" you downloaded against what is posted on Cisco's download page.

nasser2002_2005 · ‎06-27-2017

Thank you very much .

could you please give me more detail?

this is my first project

Marvin Rhoads · ‎06-27-2017

We need to confirm you have a good download. If you hover over the file in the cisco.com download page, you will see the checksum value. Copy it to notepad.

Then use a checksum utility like the Microsoft cli one or a downloadable graphical one to confirm you have a good copy downloaded by checking the checksum of your local file copy.

https://www.microsoft.com/en-us/download/details.aspx?id=11533

http://www.winmd5.com/

nasser2002_2005 · ‎06-27-2017

Thank you .

i did your instructions and the checksum match .

I started from the beginning and i download old version which is 5.3.1 image .

when i login to SFR session to boot the pkg its shows me the same error

asasfr-boot>system install ftp://10.30.2.40/asasfr-sys-5.3.1-155.pkg
Verifying

111
Upgrade aborted.
asasfr-boot>

Sheraz.Salim · ‎06-27-2017

hi,

kindly please try this ftp://user:pass@10.30.2.40/asasfr-sys-5.3.1-152.pkg

note: user:pass you have to define as in your ftp server

also make sure if you running a filezilla server create username and password to match them with ftp://user:pass@x.x.x.x

also please be advised, with version 9.7.x you need to run 6.x

Kind Regards,

sheraz.

please do not forget to rate.

nasser2002_2005 · ‎06-28-2017

Thank you for your respond

i did all step above

this is show version

sh version

Cisco Adaptive Security Appliance Software Version 9.8(1)
Firepower Extensible Operating System Version 2.2(1.47)
Device Manager Version 7.8(1)

and i tried to download SFR 6.2.0 ITS give me same error

after i read the Release note for 6.2.0

its say i have ti have 6.0.0.0 version and 6.0.0 have to have 5.4.0

so i start to download the 5.3.0

and still some issue

Marvin Rhoads · ‎06-28-2017

The references you are citing about 6.0 and 5.3 etc. are for upgrades. You are not doing an inline upgrade but instead building a new image. When re-imaging, the boot image (img file) must match the version of the system image (img file).

I don't know how you got to the initial condition. It is probably best to start over with a module uninstall:

sw-module module sfr uninstall

...and then and follow the following procedure exactly while using the version 6.2.0 files:

http://www.cisco.com/c/en/us/td/docs/security/firepower/quick_start/reimage/asa-ftd-reimage.html#id_51507

I have several such re-images and never encountered any problem.

Marvin Rhoads · ‎06-29-2017

nasser2002_2005,

Thanks for rating. Did it work for you when you restarted from the beginning?

nasser2002_2005 · ‎06-30-2017

yes, thank you :)

Ravi Kiran · ‎06-14-2019

Thanks this command at least worked for me and its showing downloading and extracting.