Re: reboot ASA to get base IOS location

mitang.prajapati · ‎02-27-2011

Hello support,

we had configure firewall on active standby mode and when i try to reboot secondary device it will reboot by old version of IOS to asa702.bin.

but my actully configured by asa802.bin We have check on firewall that boot file are below.

sh boot

BOOT variable = disk0:/asa802-k8.bin
Current BOOT variable = disk0:/asa802-k8.bin
CONFIG_FILE variable =
Current CONFIG_FILE variable =

andamani · ‎02-27-2011

Hi,

Could you please paste the output of the following:

sh run boot

sh bootvar

sh disk0:

Regards,

Anisha

mitang.prajapati · ‎02-27-2011

Dear Anisha,

Thanks for support,

please find below detail as per you post.

#########################################Primary device###############################

PRAsaOne# sh run boot
boot system disk0:/asa802-k8.bin

PRAsaOne# show run bootvar

BOOT variable = disk0:/asa802-k8.bin
Current BOOT variable = disk0:/asa802-k8.bin
CONFIG_FILE variable =
Current CONFIG_FILE variable =

PRAsaOne# show disk0:
--#-- --length-- -----date/time------ path
   64 5511168     Jan 01 2003 00:05:06 asa707-k8.bin
    6 8192        Aug 10 2007 18:00:20 crypto_archive
   65 6161700     Aug 10 2007 18:12:14 asdm-507.bin
   67 14524416    Feb 27 2011 05:23:28 asa802-k8.bin
   68 8202240     Nov 01 2007 00:48:58 asa721-k8.bin
   69 8192        Nov 26 2009 14:39:28 tmp
   70 6889764     Feb 27 2011 05:24:50 asdm-602.bin
    2 8192        Oct 31 2009 09:18:24 log

255426560 bytes total (213696512 bytes free)

#########################################Secondary device############################

PRAsaOne#sh run boot
boot system disk0:/asa802-k8.bin

PRAsaOne# sh bootvar

BOOT variable = disk0:/asa802-k8.bin
Current BOOT variable = disk0:/asa802-k8.bin
CONFIG_FILE variable =
Current CONFIG_FILE variable =

PRAsaOne# show disk0:
--#-- --length-- -----date/time------ path
   64 5511168     Jan 01 2003 00:05:24 asa707-k8.bin
    6 8192        Aug 10 2007 17:51:56 crypto_archive
   65 6161700     Aug 10 2007 18:04:00 asdm-507.bin
   67 14524416    Feb 27 2011 13:07:42 asa802-k8.bin
   68 6889764     Feb 27 2011 13:10:02 asdm-602.bin
   69 8202240     Nov 01 2007 02:20:18 asa721-k8.bin
    2 8192        Oct 31 2009 10:18:16 log
   70 8192        Nov 26 2009 14:24:10 tmp

255426560 bytes total (213704704 bytes free)

andamani · ‎02-28-2011

Please paste the output of sh ver of the secondary device.

Regards,

Anisha

mitang.prajapati · ‎02-28-2011

Dear Anisha,

##############sh version##########################

Cisco Adaptive Security Appliance Software Version 8.0(2)

Device Manager Version 6.0(2)

Compiled on Fri 15-Jun-07 19:29 by builders

System image file is "disk0:/asa802-k8.bin"

Config file at boot was "startup-config"

GoaSDCAsaOne up 19 hours 41 mins

failover cluster up 19 hours 53 mins

Hardware: ASA5540, 1024 MB RAM, CPU Pentium 4 2000 MHz

Internal ATA Compact Flash, 256MB

BIOS Flash M50FW080 @ 0xffe00000, 1024KB

Encryption hardware device : Cisco ASA-55x0 on-board accelerator (revision 0x0)

Boot microcode : CN1000-MC-BOOT-2.00

SSL/IKE microcode: CNLite-MC-SSLm-PLUS-2.01

IPSec microcode : CNlite-MC-IPSECm-MAIN-2.04

0: Ext: GigabitEthernet0/0 : address is 001b.d46e.4718, irq 9

1: Ext: GigabitEthernet0/1 : address is 001b.d46e.4719, irq 9

2: Ext: GigabitEthernet0/2 : address is 001b.d46e.471a, irq 9

3: Ext: GigabitEthernet0/3 : address is 001b.d46e.471b, irq 9

4: Ext: Management0/0 : address is 001b.d46e.4717, irq 11

5: Int: Internal-Data0/0 : address is 0000.0001.0002, irq 11

6: Int: Internal-Control0/0 : address is 0000.0001.0001, irq 5

Licensed features for this platform:

Maximum Physical Interfaces : Unlimited

Maximum VLANs : 200

Inside Hosts : Unlimited

Failover : Active/Active

VPN-DES : Enabled

VPN-3DES-AES : Enabled

Security Contexts : 2

GTP/GPRS : Disabled

VPN Peers : 5000

WebVPN Peers : 2

Advanced Endpoint Assessment : Disabled

This platform has an ASA 5540 VPN Premium license.

Serial Number: JMX3322L1GK

Running Activation Key: 0x2h3bdd58 0x88390dcd0 0xf123cda4 0x908784a0 0x4dd5ae9f

Configuration register is 0x1

Configuration last modified by enable_15 at 14:35:56.845 UTC Mon Feb 28 2011

andamani · ‎02-28-2011

Hi,

So the ASA is running 8.0.2. since it is on 8.0.2 means it has booted with version 8.0.2.

how did you come to a conclusion that it is booting with previous ASA ver.

Regards,

Anisha

mitang.prajapati · ‎02-28-2011

Hello anisha,

thanks for support,

we are just Reboot ASA and while its reboot its just go to its previous version of IOS which is available in disk0:

and its try to stabilise with primary.