ASA 5520 Boot Error: Boot Image Too Large

[chrisbicm]

Hello,

I had 2 ASAs in an Active/Active configuration but when I erased the current config and switched one back to single mode I get an error message on boot "Error: Boot Image Too Large". I have not seen any discussions or threads regarding this topic. I am not certain but I figure the best way to solve this problem would be to take the start-up config from my still working ASA... send it to a tftp server and reload it onto my ASA that wont boot. If anyone has run into this problem or can provide me with a definative answer regarding a possible solution please post a response.

Thanks,

Chris Bailey

[a.kiprawih]

Hi Chris,

Not sure, but somehow it indicates that your flash could not load the boot image due to its 'huge' size or insufficient space in flash.

BTW, can you check what's the available space in your flash? Use 'dir flash' or 'dir disk0' command. Check how many files you have in your flash. I think big files will be the ASA image and ASDM.

In case you you have more than 1 image/asdm file, you probably need to remove one of them. Other than that, check what's the default image used by ASA everytime you power it on (use 'sh boot').

Anyway, I think it's better to load fresh image file, then copy the config from other ASA (after removing IP and other unwanted config).

Rgds,

AK

[chrisbicm]

AK,

Thanks for responding I didnt think anyone was going to. I just took a look at my non-working ASA and actually printed out what its spitting out at me. Here is what it says on boot currently.... it boots straight into rommon and when I try to select something to boot from I get this... (I am not sure why I am not getting the Too Big error now....)

rommon #1> boot ?

Launching BootLoader...

Default configuration file contains 1 entry.

Cannot find ?

Error 15: File not found

unable to boot an image

Default configuration file contains 1 entry.

Cannot find ?

Error 15: File not found

unable to boot an image

Failsafe booting engaged.

Default configuration file contains 1 entry.

Searching / for images to boot.

No images in /

Error 15: File not found

unable to boot an image

This is what it says on initial startup

Evaluating BIOS Options ...

Launch BIOS Extension to setup ROMMON

Cisco Systems ROMMON Version (1.0(10)0) #0: Fri Mar 25 23:02:10 PST 2005

Platform ASA5520

Management0/0

Ethernet auto negotiation timed out.

Interface-4 Link Not Established (check cable).

Default Interface number-4 Not Up

Use ? for help.

rommon #0>

**Any idea what I should do to resolve this problem?**

Thanks again AK

[a.kiprawih]

I think your image file is missing, and ASA couldn't load it.

Normally, if wrong/incompatible image is used, you'll get error something like "no BIOS flash found". Here, you get "File not found".

Try to load new image from the rommon. Select an interface to use, i.e GigabitEthernet0/1

rommon #0>

rommon #0> PORT=GigabitEthernet0/1

GigabitEthernet0/1

Link is UP

MAC Address: xxxx.xxxx.xxxx

rommon #1> ADDRESS=10.1.1.10 --> Gig interface IP

rommon #2> SERVER=10.1.1.5 --> TTFTP server

rommon #3> GATEWAY=10.1.1.1 --> gateway, leave blank if you connect your laptop/pc direct to ASA using cross-over cable

rommon #4> IMAGE=/asa7xx-kx.bin

rommon #5> tftp ---> start to load new image

ROMMON Variable Settings:

ADDRESS=10.1.1.10

SERVER=10.1.1.5

GATEWAY=10.1.1.1

PORT=GigabitEthernet0/1

VLAN=untagged

IMAGE=/asa7xx-kx.bin

CONFIG=

LINKTIMEOUT=20

PKTTIMEOUT=2

RETRY=20

tftp /asa7xx-kx.bin@10.1.1.5 via 10.1.1.1

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

Rgds,

AK

[chrisbicm]

Wow thats actually exactly what I am looking for.... there is only one last thing! I have been searching the Cisco site looking for a copy of the .bin file I need to download.... and I havent had any luck yet finding it. Any suggestions on where I should get that file?

Thanks,

Chris

[a.kiprawih · Accepted solution]

You can download the file from the following url. But you need login using your CCO ID:

http://www.cisco.com/cgi-bin/tablebuild.pl/asa

Get both asa file and asdm.

Once you got the asa file, load it first to your ASA. Reboot, then go to the CLI. Load the asdm using this command:

copy tftp://your-server-IP/pathtofile flash:/asdm-511.bin

*http://www.cisco.com/en/US/partner/products/ps6121/prod_release_note09186a00805b8543.html#wp37943

*http://www.cisco.com/en/US/partner/products/ps6120/products_field_notice09186a0080655b8b.shtml

*http://www.cisco.com/en/US/partner/products/hw/vpndevc/ps2030/products_tech_note09186a00804708d8.shtml

Good luck.

Rgds,

AK

[chrisbicm]

Amrih,

Again just wanted to say thanks, the only thing I was wondering is the CCO ID.... is that the UN/PASS that I use to access the forums?? Or is that something I should have gotten when we purchased our ASAs?? (Cisco Adaptive Security Appliance Software

NOTE:

There are currently no files for this type.)

Thanks for all the help,

Chris

[a.kiprawih]

Chris,

Good question. I am not sure whether it's the same UN/PASS that we used to login to this forum. My company is a Cisco Partner, so we have the privilege.

The Cisco Connection Online (CCO) ID privilege allows you to download the image. It's normally available for customers under maintenance contract. But you can also subscribe it.

When you purchase ASA, I think it's either optional or you're automatically entitled to for it (for 1 year?) -> to download and upgrade minor version update of current ASA image.

Pls give it a try, and see if it works.

Rgds,

AK