08-29-2014 04:14 PM - edited 03-10-2019 06:14 AM
Hello all,
We bought two Cisco ASA 5555-X with IPS and yesterday I activated both IPS licenses through the CXSC (Cisco Prime) module GUI.
When I came this morning I rebooted both devices and one of them had an issue with the CXSC module. It looks like the image uninstalled itself and I have not been able to install it successfuly.
Here are some outputs from the 5555-X:
ASA2-CORE# session cxsc console
Opening console session with module cxsc.
ERROR: Failed to connect to unix socket /dev/ttyS1_vm2
!
ASA2-CORE# sh module
Mod Card Type Model Serial No.
---- -------------------------------------------- ------------------ -----------
0 ASA 5555-X with SW, 8 GE Data, 1 GE Mgmt ASA5555 FCH18237JUZ
ips Unknown N/A FCH18237JUZ
cxsc Unknown N/A FCH18237JUZ
Mod MAC Address Range Hw Version Fw Version Sw Version
---- --------------------------------- ------------ ------------ ---------------
0 f8c2.881b.b013 to f8c2.881b.b01c 1.0 2.1(9)8 9.1(3)
ips f8c2.881b.b011 to f8c2.881b.b011 N/A N/A
cxsc f8c2.881b.b011 to f8c2.881b.b011 N/A N/A
Mod SSM Application Name Status SSM Application Version
---- ------------------------------ ---------------- --------------------------
ips Unknown No Image Present Not Applicable
cxsc Unknown No Image Present Not Applicable
Mod Status Data Plane Status Compatibility
---- ------------------ --------------------- -------------
0 Up Sys Not Applicable
ips Unresponsive Not Applicable
cxsc Unresponsive Not Applicable
Mod License Name License Status Time Remaining
---- -------------- --------------- ---------------
ips IPS Module Disabled perpetual
ASA2-CORE# sw-module module cxsc recover configure image disk0:/ asacx-5500x-boot-9.2.1.1-48.img
ASA2-CORE# sw-module module cxsc recover boot
ASA2-CORE-BA# show module
Mod Card Type Model Serial No.
---- -------------------------------------------- ------------------ -----------
0 ASA 5555-X with SW, 8 GE Data, 1 GE Mgmt ASA5555 FCH18237JUZ
ips Unknown N/A FCH18237JUZ
cxsc Unknown N/A FCH18237JUZ
Mod MAC Address Range Hw Version Fw Version Sw Version
---- --------------------------------- ------------ ------------ ---------------
0 f8c2.881b.b013 to f8c2.881b.b01c 1.0 2.1(9)8 9.1(3)
ips f8c2.881b.b011 to f8c2.881b.b011 N/A N/A
cxsc f8c2.881b.b011 to f8c2.881b.b011 N/A N/A
Mod SSM Application Name Status SSM Application Version
---- ------------------------------ ---------------- --------------------------
ips Unknown No Image Present Not Applicable
Mod Status Data Plane Status Compatibility
---- ------------------ --------------------- -------------
0 Up Sys Not Applicable
ips Unresponsive Not Applicable
cxsc Recover Not Applicable
Mod License Name License Status Time Remaining
---- -------------- --------------- ---------------
ips IPS Module Disabled perpetual
------------------------------------------------------------------------------------------
After booting the module and loading the image the CXSC stayed on ¨Recover¨ state for almost three hours, then I rebooted it. I have tried this process several times and Im still not able to install the image on the CXSC module.
Any help will be highly appreciated!!!
09-03-2014 04:14 PM
Well, after a few days troubleshooting I managed to recover the CXCS module.
I did a clean install using the latest boot and system image and repartitioned the SSDs. Got everything back on track.
If any of you have a similar issue, here is the link with the steps I followed:
http://www.cisco.com/c/en/us/td/docs/security/asa/quick_start/cx/cx_qsg.html
Specifically: 5 (ASA 5512-X through ASA 5555-X; May Be Required) Installing the Software Module
Good luck!
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide