ASA5505故障的解决方案

第一种现象：

小pix 启动不了



故障现象： 系统的POWER 灯亮绿色，
STATUS 亮黄色
SONSOLE 无输出信息

解决的方法： 换dram




设备可以ok

第二种现象：

Low Memory: 632 KB
High Memory: 507 MB
PCI Device Table.
Bus Dev Func VendID DevID Class Irq
00 01 00 1022 2080 Host Bridge
00 01 02 1022 2082 Chipset En/Decrypt 11
00 0C 00 1148 4320 Ethernet 11
00 0D 00 177D 0003 Network En/Decrypt 10
00 0F 00 1022 2090 ISA Bridge
00 0F 02 1022 2092 IDE Controller
00 0F 03 1022 2093 Audio 10
00 0F 04 1022 2094 Serial Bus 9
00 0F 05 1022 2095 Serial Bus 9

Evaluating BIOS Options ...
Launch BIOS Extension to setup ROMMON

Cisco Systems ROMMON Version (1.0(12)13) #0: Thu Aug 28 15:55:27 PDT 2008


CISCO SYSTEMS
Embedded BIOS Version 1.0(12)13 08/28/08 15:50:37.45

Low Memory: 632 KB
High Memory: 251 MB
PCI Device Table.
Bus Dev Func VendID DevID Class Irq
00 01 00 1022 2080 Host Bridge
00 01 02 1022 2082 Chipset En/Decrypt 11
00 0C 00 1148 4320 Ethernet 11
00 0D 00 177D 0003 Network En/Decrypt 10
00 0F 00 1022 2090 ISA Bridge
00 0F 02 1022 2092 IDE Controller
00 0F 03 1022 2093 Audio 10
00 0F 04 1022 2094 Serial Bus 9
00 0F 05 1022 2095 Serial Bus 9

Evaluating BIOS Options ...
Launch BIOS Extension to setup ROMMON

Cisco Systems ROMMON Version (1.0(12)13) #0: Thu Aug 28 15:55:27 PDT 2008


CISCO SYSTEMS
Embedded BIOS Version 1.0(12)13 08/28/08 15:50:37.45

Low Memory: 632 KB
High Memory: 251 MB
PCI Device Table.
Bus Dev Func VendID DevID Class Irq
00 01 00 1022 2080 Host Bridge
00 01 02 1022 2082 Chipset En/Decrypt 11
00 0C 00 1148 4320 Ethernet 11
00 0D 00 177D 0003 Network En/Decrypt 10
00 0F 00 1022 2090 ISA Bridge
00 0F 02 1022 2092 IDE Controller
00 0F 03 1022 2093 Audio 10
00 0F 04 1022 2094 Serial Bus 9
00 0F 05 1022 2095 Serial Bus 9

Evaluating BIOS Options ...
Launch BIOS Extension to setup ROMMON

Cisco Systems ROMMON Version (1.0(12)13) #0: Thu Aug 28 15:55:27 PDT 2008
i2c_read_word_w_wait() error, slot = 0x0, device = 0x64, address = 134 byte count = 2. Reason: I2C_UNPOPULATED_ERROR

Platform ASA5505

Use BREAK or ESC to interrupt boot.
Use SPACE to begin boot immediately.

Launching BootLoader...
Boot configuration file contains 1 entry.


Loading disk0:/asa804-k8.bin... Booting...
Loading...
€
Processor memory 185683968, Reserved memory: 20971520 (DSOs: 0 + kernel: 20971520)
Guest R

AM start: 0xd3800080
Guest RAM end: 0xdd400000
Guest RAM brk: 0xd3801000

IO memory 39403520 bytes
IO memory start: 0xd0fff000
IO memory end: 0xd3593000

Total SSMs found: 0

Total NICs found: 10



ciscoasa>

CISCO SYSTEMS
Embedded BIOS Version 1.0(12)11 04/30/08 15:45:41.19

Low Memory: 632 KB
High Memory: 251 MB
PCI Device Table.
Bus Dev Func VendID DevID Class Irq
00 01 00 1022 2080 Host Bridge
00 01 02 1022 2082 Chipset En/Decrypt 11
00 0C 00 1148 4320 Ethernet 11
00 0D 00 177D 0003 Network En/Decrypt 10
00 0F 00 1022 2090 ISA Bridge
00 0F 02 1022 2092 IDE Controller
00 0F 03 1022 2093 Audio 10
00 0F 04 1022 2094 Serial Bus 9
00 0F 05 1022 2095 Serial Bus 9

Evaluating BIOS Options ...
Launch BIOS Extension to setup ROMMON

Cisco Systems ROMMON Version (1.0(12)11) #4: Thu May 1 14:50:05 PDT 2008



换了 cs 这个芯片 就ok
CISCO SYSTEMS
Embedded BIOS Version 1.0(12)13 08/28/08 15:50:37.45

Low Memory: 632 KB
High Memory: 251 MB
PCI Device Table.
Bus Dev Func VendID DevID Class Irq
00 01 00 1022 2080 Host Bridge
00 01 02 1022 2082 Chipset En/Decrypt 11
00 0C 00 1148 4320 Ethernet 11
00 0D 00 177D 0003 Network En/Decrypt 10
00 0F 00 1022 2090 ISA Bridge
00 0F 02 1022 2092 IDE Controller
00 0F 03 1022 2093 Audio 10
00 0F 04 1022 2094 Serial Bus 9
00 0F 05 1022 2095 Serial Bus 9

Evaluating BIOS Options ...
Launch BIOS Extension to setup ROMMON

Cisco Systems ROMMON Version (1.0(12)13) #0: Thu Aug 28 15:55:27 PDT 2008

Platform ASA5505

PASSWORD RECOVERY FUNCTIONALITY IS DISABLED
Use BREAK or ESC to interrupt boot.
Use SPACE to begin boot immediately.

Launching BootLoader...
Default configuration file contains 1 entry.

Searching / for images to boot.

Loading /asa724-k8.bin... Booting...
##########################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################
256MB RAM

Total SSMs found: 0

Total NICs found: 10
88E6095 rev 2 Gigabit Ethernet @ index 09 MAC: 0000.0003.0002
88E6095 rev 2 Ethernet @ index 08 MAC: c84c.7574.53e4
88E6095 rev 2 Ethernet @ index 07 MAC: c84c.7574.53e3
88E6095 rev 2 Ethernet @ index 06 MAC: c84c.7574.53e2
88E6095 rev 2 Ethernet @ index 05 MAC: c84c.7574.53e1
88

E6095 rev 2 Ethernet @ index 04 MAC: c84c.7574.53e0
88E6095 rev 2 Ethernet @ index 03 MAC: c84c.7574.53df
88E6095 rev 2 Ethernet @ index 02 MAC: c84c.7574.53de
88E6095 rev 2 Ethernet @ index 01 MAC: c84c.7574.53dd
y88acs06 rev16 Gigabit Ethernet @ index 00 MAC: c84c.7574.53e5

Licensed features for this platform:
Maximum Physical Interfaces : 8
VLANs : 3, DMZ Restricted
Inside Hosts : 10
Failover : Disabled
VPN-DES : Enabled
VPN-3DES-AES : Disabled
VPN Peers : 10
WebVPN Peers : 2
Dual ISPs : Disabled
VLAN Trunk Ports : 0

This platform has a Base license.

Encryption hardware device : Cisco ASA-5505 on-board accelerator (revision 0x0)
Boot microcode : CNlite-MC-Boot-Cisco-1.2
SSL/IKE microcode: CNlite-MC-IPSEC-Admin-3.03
IPSec microcode : CNlite-MC-IPSECm-MAIN-2.05

Cisco Adaptive Security Appliance Software Version 7.2(4)

****************************** Warning *******************************
This product contains cryptographic features and is
subject to United States and local country laws
governing, import, export, transfer, and use.
Delivery of Cisco cryptographic products does not
imply third-party authority to import, export,
distribute, or use encryption. Importers, exporters,
distributors and users are responsible for compliance
with U.S. and local country laws. By using this
product you agree to comply with applicable laws and
regulations. If you are unable to comply with U.S.
and local laws, return the enclosed items immediately.

A summary of U.S. laws governing Cisco cryptographic
products may be found at:
https://www.docsj.com/doc/759585579.html,/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by
sending email to export@https://www.docsj.com/doc/759585579.html,.
******************************* Warning *******************************

Copyright (c) 1996-2008 by Cisco Systems, Inc.

Restricted Rights Legend

Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.

Cisco Systems, Inc.
170 West Tasman Drive
San Jose, California 95134-1706


Cryptochecksum (unchanged): e5e3d91b 6734b140 73f78993 2163b1c3
Type help or '?' for a list of available commands.
ciscoasa>
ciscoasa>
ciscoasa> en
Password:
ciscoasa# sh ver

Cisco Adaptive Security Appliance Software Version 7.2(4)
Device Manager Version 5.2(4)

Compiled on Sun 06-Apr-08 13:39 b

y builders
System image file is "disk0:/asa724-k8.bin"
Config file at boot was "startup-config"

ciscoasa up 8 secs

Hardware: ASA5505, 256 MB RAM, CPU Geode 500 MHz
Internal ATA Compact Flash, 128MB
BIOS Flash Firmware Hub @ 0xffe00000, 1024KB

Encryption hardware device : Cisco ASA-5505 on-board accelerator (revision 0x0)
Boot microcode : CNlite-MC-Boot-Cisco-1.2
SSL/IKE microcode: CNlite-MC-IPSEC-Admin-3.03
IPSec microcode : CNlite-MC-IPSECm-MAIN-2.05
0: Int: Internal-Data0/0 : address is c84c.7574.53e5, irq 11
1: Ext: Ethernet0/0 : address is c84c.7574.53dd, irq 255
2: Ext: Ethernet0/1 : address is c84c.7574.53de, irq 255
3: Ext: Ethernet0/2 : address is c84c.7574.53df, irq 255
4: Ext: Ethernet0/3 : address is c84c.7574.53e0, irq 255
5: Ext: Ethernet0/4 : address is c84c.7574.53e1, irq 255
6: Ext: Ethernet0/5 : address is c84c.7574.53e2, irq 255
7: Ext: Ethernet0/6 : address is c84c.7574.53e3, irq 255
8: Ext: Ethernet0/7 : address is c84c.7574.53e4, irq 255
9: Int: Internal-Data0/1 : address is 0000.0003.0002, irq 255
10: Int: Not used : irq 255
11: Int: Not used : irq 255

Licensed features for this platform:
Maximum Physical Interfaces : 8
VLANs : 3, DMZ Restricted
Inside Hosts : 10
Failover : Disabled
VPN-DES : Enabled
VPN-3DES-AES : Disabled
VPN Peers : 10
WebVPN Peers : 2
Dual ISPs : Disabled
VLAN Trunk Ports : 0

This platform has a Base license.

Serial Number: JMX14234205
Running Activation Key: 0x6221d549 0x44be3252 0xe0d22518 0xa17cb0ec 0x880a3c82
Configuration register is 0x1
Configuration has not been modified since last system restart.
ciscoasa#
ciscoasa#
ciscoasa#
ciscoasa#
ciscoasa#
ciscoasa#
ciscoasa#
ciscoasa#
ciscoasa# sh star
: Saved
: Written by enable_15 at 11:34:54.013 UTC Thu Jun 3 2010
!
ASA Version 7.2(4)
!
hostname ciscoasa
enable password 8Ry2YjIyt7RRXU24 encrypted
passwd 2KFQnbNIdI.2KYOU encrypted
names
!
interface Vlan1
nameif inside
security-level 100
ip address 192.168.1.1 255.255.255.0
!
interface Vlan2
nameif outside
security-level 0
ip address dhcp setroute
!
interface Ethernet0/0
switchport access vlan 2
!
interface Ethernet0/1
!
interface Ethernet0/2
!
interface Ethernet0/3
!
interface Ethernet0/4
!
interface Ethernet0/5
!
interface Ethernet0/6
!
interface Ethernet0/7
!
ftp mode passive
pager lines 24
logging asdm informational
mtu outside 1500
mtu inside 1500
icmp unreachable rate-limit 1 burst-size 1
no asdm history enable
arp timeout 14400
global (outside) 1 interface
nat (inside) 1 0.0.0.0 0.

0.0.0
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
http server enable
http 192.168.1.0 255.255.255.0 inside
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
telnet timeout 5
ssh timeout 5
console timeout 0
dhcpd auto_config outside
!
dhcpd address 192.168.1.2-192.168.1.33 inside
dhcpd enable inside
!

!
!
prompt hostname context
Cryptochecksum:e5e3d91b6734b14073f789932163b1c3
ciscoasa#
ciscoasa#
ciscoasa#
ciscoasa#
ciscoasa#
ciscoasa# sh ver

Cisco Adaptive Security Appliance Software Version 7.2(4)
Device Manager Version 5.2(4)

Compiled on Sun 06-Apr-08 13:39 by builders
System image file is "disk0:/asa724-k8.bin"
Config file at boot was "startup-config"

ciscoasa up 19 mins 32 secs

Hardware: ASA5505, 256 MB RAM, CPU Geode 500 MHz
Internal ATA Compact Flash, 128MB
BIOS Flash Firmware Hub @ 0xffe00000, 1024KB

Encryption hardware device : Cisco ASA-5505 on-board accelerator (revision 0x0)
Boot microcode : CNlite-MC-Boot-Cisco-1.2
SSL/IKE microcode: CNlite-MC-IPSEC-Admin-3.03
IPSec microcode : CNlite-MC-IPSECm-MAIN-2.05
0: Int: Internal-Data0/0 : address is c84c.7574.53e5, irq 11
1: Ext: Ethernet0/0 : address is c84c.7574.53dd, irq 255
2: Ext: Ethernet0/1 : address is c84c.7574.53de, irq 255
3: Ext: Ethernet0/2 : address is c84c.7574.53df, irq 255
4: Ext: Ethernet0/3 : address is c84c.7574.53e0, irq 255
5: Ext: Ethernet0/4 : address is c84c.7574.53e1, irq 255
6: Ext: Ethernet0/5 : address is c84c.7574.53e2, irq 255
7: Ext: Ethernet0/6 : address is c84c.7574.53e3, irq 255
8: Ext: Ethernet0/7 : address is c84c.7574.53e4, irq 255
9: Int: Internal-Data0/1 : address is 0000.0003.0002, irq 255
10: Int: Not used : irq 255
11: Int: Not used : irq 255

Licensed features for this platform:
Maximum Physical Interfaces : 8
VLANs : 3, DMZ Restricted
Inside Hosts : 10
Failover : Disabled
VPN-DES : Enabled
VPN-3DES-AES : Disabled
VPN Peers : 10
WebVPN Peers : 2
Dual ISPs : Disabled
VLAN Trunk Ports : 0

This platform has a Base license.

Serial Number: JMX14234205
Running Activation Key: 0x6221d549 0x44be3252 0xe0d22518 0xa17cb0ec 0x880a3c82
Configuration register is 0x1
Configuration has not been modified since last system restart.
ciscoasa#
ciscoasa#

第三种：
ios 丢了

ADDRESS=192.168.8.166

SERVER=192.168.8.28

GATEWAY=192.168.8.254

PORT=Ethernet0/0

Ethernet0/0
MAC Address: 0022.90b5.1d57
Link is UP
rommon #5> IMAGE=asa723-k8.bin

rommon #6> tftpdnld
ROMMON Variable Settings:
ADDRESS=192.168.8.166
SERVER=192.168.8.30
GATEWAY=192.168.8.254
PORT=Ethernet0/0
VLAN=untagged
IMAGE=asa804-k8.bin
CONFIG=
LINKTIMEOUT=20
PKTTIMEOUT=4
RETRY=20

tftp asa804-k8.bin@192.168.8.30 via 192.168.8.254
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!

第四：
2.04
0: Ext: Ethernet0/0 : address is 0018.b9a8.6114, irq 9
1: Ext: Ethernet0/1 : address is 0018.b9a8.6115, irq 9
2: Ext: Ethernet0/2 : address is 0018.b9a8.6116, irq 9
3: Ext: Ethernet0/3 : address is 0018.b9a8.6117, irq 9
4: Ext: Management0/0 : address is 0018.b9a8.6118, irq 11
5: Int: Not used : irq 11
6: Int: Not used : irq 5
The Running Activation Key is not valid, using default settings:
启动到这个地方 就不到了 ,

解决办法是:
换flash中的 ios version 723 724 就 ok






Licensed features for this platform:
Maximum Physical Interfaces : Unlimited
Maximum VLANs : 50


第五种
怎么样变 Inside Hosts : 10 用户， 这个下次再说，呵呵