Here's a good Cisco ASA FirePower module upgrade guide. The ASA image must be at least on the 9.2.2 code and there's an ASA image to FirePower version compatibility matrix that should be followed. Below is an SSD expansion module inserted on a Cisco 5525-X firewall. You can verify the status on the SSD drive on the ASA using the show inventory and show module commands.
ciscoasa# show version
Cisco Adaptive Security Appliance Software Version 9.4(3)12
Device Manager Version 7.6(1)
Compiled on Thu 20-Oct-16 17:58 PDT by builders
System image file is "disk0:/asa943-12-smp-k8.bin"
Config file at boot was "startup-config"
ciscoasa up 2 days 18 hours
Hardware: ASA5525, 8192 MB RAM, CPU Lynnfield 2394 MHz, 1 CPU (4 cores)
ASA: 4096 MB RAM, 1 CPU (1 core)
Internal ATA Compact Flash, 8192MB
BIOS Flash MX25L6445E @ 0xffbb0000, 8192KB
Encryption hardware device : Cisco ASA Crypto on-board accelerator (revision 0x1)
Boot microcode : CNPx-MC-BOOT-2.00
SSL/IKE microcode : CNPx-MC-SSL-SB-PLUS-0005
IPSec microcode : CNPx-MC-IPSEC-MAIN-0026
Number of accelerators: 1
Baseboard Management Controller (revision 0x1) Firmware Version: 2.4
0: Int: Internal-Data0/0 : address is fc5b.39aa.5164, irq 11
1: Ext: GigabitEthernet0/0 : address is fc5b.39aa.5169, irq 5
2: Ext: GigabitEthernet0/1 : address is fc5b.39aa.5165, irq 5
3: Ext: GigabitEthernet0/2 : address is fc5b.39aa.516a, irq 10
4: Ext: GigabitEthernet0/3 : address is fc5b.39aa.5166, irq 10
5: Ext: GigabitEthernet0/4 : address is fc5b.39aa.516b, irq 5
6: Ext: GigabitEthernet0/5 : address is fc5b.39aa.5167, irq 5
7: Ext: GigabitEthernet0/6 : address is fc5b.39aa.516c, irq 10
8: Ext: GigabitEthernet0/7 : address is fc5b.39aa.5168, irq 10
9: Int: Internal-Data0/1 : address is 0000.0001.0002, irq 0
10: Int: Internal-Control0/0 : address is 0000.0001.0001, irq 0
11: Int: Internal-Data0/2 : address is 0000.0001.0003, irq 0
12: Ext: Management0/0 : address is fc5b.39aa.5164, irq 0
Licensed features for this platform:
Maximum Physical Interfaces : Unlimited perpetual
Maximum VLANs : 200 perpetual
Inside Hosts : Unlimited perpetual
Failover : Active/Active perpetual
Encryption-DES : Enabled perpetual
Encryption-3DES-AES : Enabled perpetual
Security Contexts : 2 perpetual
GTP/GPRS : Disabled perpetual
AnyConnect Premium Peers : 2 perpetual
AnyConnect Essentials : Disabled perpetual
Other VPN Peers : 750 perpetual
Total VPN Peers : 750 perpetual
Shared License : Disabled perpetual
AnyConnect for Mobile : Disabled perpetual
AnyConnect for Cisco VPN Phone : Disabled perpetual
Advanced Endpoint Assessment : Disabled perpetual
Total UC Proxy Sessions : 2 perpetual
Botnet Traffic Filter : Disabled perpetual
IPS Module : Disabled perpetual
Cluster : Enabled perpetual
Cluster Members : 2 perpetual
This platform has an ASA5525 VPN Premium license.
Serial Number: FCH1834JABC
Running Permanent Activation Key: 0x363bee4d 0xcc858b80 0xe5d21db4 0xf1d49123 0xcb04c456
Configuration register is 0x1
Image type : Release
Key version : A
Configuration has not been modified since last system restart.
ciscoasa# show inventory
Name: "Chassis", DESCR: "ASA 5525-X with SW, 8 GE Data, 1 GE Mgmt, AC"
PID: ASA5525 , VID: V03 , SN: FTX18401234
Name: "Storage Device 1", DESCR: "Model Number: Micron_M550_MTFDDAK128MAY"
PID: N/A , VID: N/A , SN: MXA1835ABCD
ciscoasa# show module
Mod Card Type Model Serial No.
---- -------------------------------------------- ------------------ -----------
0 ASA 5525-X with SW, 8 GE Data, 1 GE Mgmt, AC ASA5525 FCH1834JABC
ips Unknown N/A FCH1834JABC
cxsc Unknown N/A FCH1834JABC
sfr Unknown N/A FCH1834JABC
Mod MAC Address Range Hw Version Fw Version Sw Version
---- --------------------------------- ------------ ------------ ---------------
0 fc5b.39aa.5164 to fc5b.39aa.5123 1.0 2.1(9)8 9.4(3)12
ips fc5b.39aa.5162 to fc5b.39aa.5123 N/A N/A
cxsc fc5b.39aa.5162 to fc5b.39aa.5123 N/A N/A
sfr fc5b.39aa.5162 to fc5b.39aa.5123 N/A N/A
Mod SSM Application Name Status SSM Application Version
---- ------------------------------ ---------------- --------------------------
ips Unknown No Image Present Not Applicable
sfr Unknown No Image Present Not Applicable
Mod Status Data Plane Status Compatibility
---- ------------------ --------------------- -------------
0 Up Sys Not Applicable
ips Unresponsive Not Applicable
cxsc Unresponsive Not Applicable
sfr Unresponsive Not Applicable
Mod License Name License Status Time Remaining
---- -------------- --------------- ---------------
ips IPS Module Disabled perpetual
TFTP the FirePower image to the ASA flash.
ciscoasa# configure terminal
ciscoasa(config)# interface g0/1
ciscoasa(config-if)# ip add ress 192.168.1.1 255.255.255.0
ciscoasa(config-if)# no shut
ciscoasa(config-if)# show run interface f g0/1
!
interface GigabitEthernet0/1
nameif inside
security-level 100
ip address 192.168.1.1 255.255.255.0
ciscoasa(config-if)# ping 192.168.1.2
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.1.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms
ciscoasa(config-if)#
ciscoasa(config-if)# end
ciscoasa# copy tftp://192.168.1.2/asasfr-5500x-boot-6.0.0-1005.img disk0:/ ?
disk0: Copy to disk0: file system
disk1: Copy to disk1: file system
flash: Copy to flash: file system
running-config Update (merge with) current system configuration
startup-config Copy to startup configuration
system: Copy to system: file system
ciscoasa# copy tftp://192.168.1.2/asasfr-5500x-boot-6.0.0-1005.img disk 0:
Address or name of remote host [192.168.1.2]?
Source filename [asasfr-5500x-boot-6.0.0-1005.img]?
Destination filename [asasfr-5500x-boot-6.0.0-1005.img]?
Accessing tftp://192.168.1.2/asasfr-5500x-boot-6.0.0-1005.img...!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
<OUTPUT TRUNCATED>
!!!!!!!!!!!!!!!!!!!!!!!!!
41848832 bytes copied in 31.880 secs (1349962 bytes/sec)
ciscoasa# dir
Directory of disk0:/
11 drwx 4096 19:16:16 Sep 29 2014 log
22 drwx 4096 19:16:44 Sep 29 2014 crypto_archive
23 drwx 4096 19:16:52 Sep 29 2014 coredumpinfo
120 -rwx 37656576 19:25:02 Sep 29 2014 asa913-smp-k8.bin
121 -rwx 22658960 19:27:04 Sep 29 2014 asdm-714.bin
122 -rwx 73285632 00:38:08 Jun 06 2017 asa943-12-smp-k8.bin
123 -rwx 69828608 19:28:22 Sep 29 2014 asacx-5500x-boot-9.2.1.1-48.img
124 -rwx 25819140 00:42:58 Jun 06 2017 asdm-761.bin
125 -rwx 12998641 19:51:42 Sep 29 2014 csd_3.5.2008-k9.pkg
126 drwx 4096 19:51:44 Sep 29 2014 sdesktop
127 -rwx 6487517 19:51:44 Sep 29 2014 anyconnect-macosx-i386-2.5.2014-k9.pkg
128 -rwx 6689498 19:51:44 Sep 29 2014 anyconnect-linux-2.5.2014-k9.pkg
129 -rwx 4678691 19:51:44 Sep 29 2014 anyconnect-win-2.5.2014-k9.pkg
130 -rwx 100 22:45:26 Jun 05 2017 upgrade_startup_errors_201706052245.log
137 -rwx 41848832 18:55:08 Jun 08 2017 asasfr-5500x-boot-6.0.0-1005.img
8238202880 bytes total (4712689664 bytes free)
ciscoasa# delete disk0:/asacx-5500x-boot-9.2.1.1-48.img // REMOVE CX IMAGE IN FLASH
Delete filename [asacx-5500x-boot-9.2.1.1-48.img]?
Delete disk0:/asacx-5500x-boot-9.2.1.1-48.img? [confirm]
ciscoasa# dir
Directory of disk0:/
11 drwx 4096 19:16:16 Sep 29 2014 log
22 drwx 4096 19:16:44 Sep 29 2014 crypto_archive
23 drwx 4096 19:16:52 Sep 29 2014 coredumpinfo
120 -rwx 37656576 19:25:02 Sep 29 2014 asa913-smp-k8.bin
121 -rwx 22658960 19:27:04 Sep 29 2014 asdm-714.bin
122 -rwx 73285632 00:38:08 Jun 06 2017 asa943-12-smp-k8.bin
124 -rwx 25819140 00:42:58 Jun 06 2017 asdm-761.bin
125 -rwx 12998641 19:51:42 Sep 29 2014 csd_3.5.2008-k9.pkg
126 drwx 4096 19:51:44 Sep 29 2014 sdesktop
127 -rwx 6487517 19:51:44 Sep 29 2014 anyconnect-macosx-i386-2.5.2014-k9.pkg
128 -rwx 6689498 19:51:44 Sep 29 2014 anyconnect-linux-2.5.2014-k9.pkg
129 -rwx 4678691 19:51:44 Sep 29 2014 anyconnect-win-2.5.2014-k9.pkg
130 -rwx 100 22:45:26 Jun 05 2017 upgrade_startup_errors_201706052245.log
137 -rwx 41848832 18:55:08 Jun 08 2017 asasfr-5500x-boot-6.0.0-1005.img
8238202880 bytes total (4712689664 bytes free)
ciscoasa# sw-module ?
module Act on a module
ciscoasa# sw-module module ?
Available module ID(s):
cxsc Module ID
ips Module ID
sfr Module ID
ciscoasa# sw-module module sfr ?
recover Configure recovery of this module
reload Reload the module
reset Reset the module
shutdown Shut down the module
uninstall Uninstall the module
ciscoasa# sw-module module sfr recover ?
boot Initiate recovery of this module
configure Configure recovery parameters for this module
stop Stop recovery of this module
ciscoasa# sw-module module sfr recover configure ?
image Configure image file path on disk
ciscoasa# sw-module module sfr recover configure image ?
disk0: Image File Path
disk1: Image File Path
flash: Image File Path
ciscoasa# sw-module module sfr recover configure image disk0:/asasfr-5500x-boot-6.0.0-1005.img
ERROR: Another service (cxsc) is running, only one service is allowed to run at any time // CX MODULE WAS USED PREVIOUSLY
ciscoasa# sw-module module cxsc ?
password-reset Reset the CLI password on the module
recover Configure recovery of this module
reload Reload the module
reset Reset the module
shutdown Shut down the module
uninstall Uninstall the module
ciscoasa# sw-module module cxsc shutdown
Shutdown module cxsc? [confirm]
Shutdown issued for module cxsc.
ciscoasa# sw-module module cxsc uninstall
Module cxsc will be uninstalled. This will completely remove the disk image assocated with the sw-module including any configuration that existed within it.
Uninstall module cxsc? [confirm]
Uninstall issued for module cxsc.
ciscoasa#
ciscoasa# reload
System config has been modified. Save? [Y]es/[N]o: y
Cryptochecksum: c2929293 66ae9c7b 3523edd9 e85ff237
2866 bytes copied in 0.680 secs
Proceed with reload? [confirm]
ciscoasa# // ASA DIDN'T REBOOT
ciscoasa# reload ?
at Reload at a specific time/date
cancel Cancel a scheduled reload
in Reload after a time interval
max-hold-time Maximum hold time for orderly reload
noconfirm Reload without asking for confirmation
quick Quick reload without properly shutting down each subsystem
reason Reason for reload
save-config Save configuration before reload
<cr>
ciscoasa# reload noconfirm ?
at Reload at a specific time/date
in Reload after a time interval
max-hold-time Maximum hold time for orderly reload
quick Quick reload without properly shutting down each subsystem
reason Reason for reload
save-config Save configuration before reload
<cr>
ciscoasa# reload noconfirm quick ?
at Reload at a specific time/date
in Reload after a time interval
max-hold-time Maximum hold time for orderly reload
reason Reason for reload
save-config Save configuration before reload
<cr>
ciscoasa# reload noconfirm quick
***
*** --- SHUTDOWN NOW ---
Process shutdown finished
Rebooting.....
<OUTPUT TRUNCATED>
ciscoasa# sw-module module sfr recover configure image disk0:/asasfr-5500x-boot-6.0.0-1005.img
ciscoasa# debug module-boot ?
<1-255> Specify an optional debug level (default is 1)
<cr>
ciscoasa# debug module-boot // ISSUE THIS DEBUG TO MONITOR SFR UPGRADE
debug module-boot enabled at level 1
ciscoasa# sw-module module sfr recover boot
Module sfr will be recovered. This may erase all configuration and all data
on that device and attempt to download/install a new image for it. This may take
several minutes.
Recover module sfr? [confirm] // HIT ENTER
Recover issued for module sfr.
ciscoasa# Mod-sfr 0> ***
Mod-sfr 1> *** EVENT: Creating the Disk Image...
Mod-sfr 2> *** TIME: 19:14:00 UTC Jun 8 2017
Mod-sfr 3> ***
Mod-sfr 4> ***
Mod-sfr 5> *** EVENT: The module is being recovered.
Mod-sfr 6> *** TIME: 19:14:00 UTC Jun 8 2017
Mod-sfr 7> ***
Mod-sfr 8> ***
Mod-sfr 9> *** EVENT: Disk Image created successfully.
Mod-sfr 10> *** TIME: 19:16:45 UTC Jun 8 2017
Mod-sfr 11> ***
Mod-sfr 12> ***
Mod-sfr 13> *** EVENT: Start Parameters: Image: /mnt/disk0/vm/vm_3.img, ISO: -cdrom /mnt/disk0/
Mod-sfr 14> asasfr-5500x-boot-6.0.0-1005.img, Num CPUs: 3, RAM: 3614MB, Mgmt MAC: FC:5B:39:AA:5
Mod-sfr 15> 1:62, CP MAC: 00:00:00:04:00:01, HDD: -drive file=/dev/md0,cache=none,if=virtio, De
Mod-sfr 16> ***
Mod-sfr 17> *** EVENT: Start Parameters Continued: RegEx Shared Mem: 32MB, Cmd Op: r, Shared Me
Mod-sfr 18> m Key: 8061, Shared Mem Size: 64, Log Pipe: /dev/ttyS0_vm3, Sock: /dev/ttyS1_vm3, M
Mod-sfr 19> em-Path: -mem-path /hugepages
Mod-sfr 20> *** TIME: 19:16:46 UTC Jun 8 2017
Mod-sfr 21> ***
Mod-sfr 22> Status: Mapping host 0x2aab8d200000 to VM with size 67108864
Mod-sfr 23> Warning: vlan 0 is not connected to host network
Mod-sfr 24> ISOLINUX 3.73 2009-01-25 Copyright (C) 1994-2008 H. Peter Anvin
Mod-sfr 25> Cisco SFR-BOOT-IMAGE and CX-BOOT-IMAGE for SFR - 6.0.0
Mod-sfr 26> (WARNING: ALL DATA ON DISK 1 WILL BE LOST)
Mod-sfr 27> Loading bzImage..........................................................
Mod-sfr 28> Loading initramfs.gz...............................................................
Mod-sfr 29> ...................................................................................
Mod-sfr 30> ...................................................................................
Mod-sfr 31> ...................................................................................
Mod-sfr 32> ...................................................................................
Mod-sfr 33> ...................................................................................
Mod-sfr 34> ...................................................................................
Mod-sfr 35> ...................ready.
Mod-sfr 36> [ 0.000000] BIOS EBDA/lowmem at: 0009fc00/0009fc00
Mod-sfr 37> [ 0.000000] Initializing cgroup subsys cpuset
Mod-sfr 38> [ 0.000000] Initializing cgroup subsys cpu
Mod-sfr 39> [ 0.000000] Linux version 2.6.28.10.x86-target-64 (build@cel64build6.esn.sourcef
Mod-sfr 40> ire.com) (gcc version 4.3.3 (MontaVista Linux Sourcery G++ 4.3-292) ) #1 SMP PREEMP
Mod-sfr 41> T Sun Nov 8 16:49:06 EST 2015
Mod-sfr 42> [ 0.000000] Command line: initrd=initramfs.gz console=ttyS0,9600 BOOT_IMAGE=bzIm
Mod-sfr 43> age
Mod-sfr 44> [ 0.000000] KERNEL supported cpus:
Mod-sfr 45> [ 0.000000] Intel GenuineIntel
Mod-sfr 46> [ 0.000000] AMD AuthenticAMD
Mod-sfr 47> [ 0.000000] Centaur CentaurHauls
Mod-sfr 48> [ 0.000000] PAT WC disabled due to known CPU erratum.
Mod-sfr 49> [ 0.000000] BIOS-provided physical RAM map:
Mod-sfr 50> [ 0.000000] BIOS-e820: 0000000000000000 - 000000000009fc00 (usable)
Mod-sfr 51> [ 0.000000] BIOS-e820: 000000000009fc00 - 00000000000a0000 (reserved)
Mod-sfr 52> [ 0.000000] BIOS-e820: 00000000000f0000 - 0000000000100000 (reserved)
Mod-sfr 53> [ 0.000000] BIOS-e820: 0000000000100000 - 00000000dfffe000 (usable)
Mod-sfr 54> [ 0.000000] BIOS-e820: 00000000dfffe000 - 00000000e0000000 (reserved)
Mod-sfr 55> [ 0.000000] BIOS-e820: 00000000feffc000 - 00000000ff000000 (reserved)
Mod-sfr 56> [ 0.000000] BIOS-e820: 00000000fffc0000 - 0000000100000000 (reserved)
Mod-sfr 57> [ 0.000000] BIOS-e820: 0000000100000000 - 0000000101e00000 (usable)
Mod-sfr 58> [ 0.000000] DMI 2.4 present.
Mod-sfr 59> [ 0.000000] last_pfn = 0x101e00 max_arch_pfn = 0x3ffffffff
Mod-sfr 60> [ 0.000000] last_pfn = 0xdfffe max_arch_pfn = 0x3ffffffff
Mod-sfr 61> [ 0.000000] init_memory_mapping: 0000000000000000-00000000dfffe000
Mod-sfr 62> [ 0.000000] last_map_addr: dfffe000 end: dfffe000
Mod-sfr 63> [ 0.000000] init_memory_mapping: 0000000100000000-0000000101e00000
Mod-sfr 64> [ 0.000000] last_map_addr: 101e00000 end: 101e00000
Mod-sfr 65> [ 0.000000] RAMDISK: 7dbe1000 - 7ffff5d8
Mod-sfr 66> [ 0.000000] ACPI: RSDP 000FD8D0, 0014 (r0 BOCHS )
Mod-sfr 67> [ 0.000000] ACPI: RSDT DFFFE3E0, 0034 (r1 BOCHS BXPCRSDT 1 BXPC 1
Mod-sfr 68> [ 0.000000] ACPI: FACP DFFFFF80, 0074 (r1 BOCHS BXPCFACP 1 BXPC 1
Mod-sfr 69> [ 0.000000] ACPI: DSDT DFFFE420, 11A9 (r1 BXPC BXDSDT 1 INTL 20100528
Mod-sfr 70> [ 0.000000] ACPI: FACS DFFFFF40, 0040
Mod-sfr 71> [ 0.000000] ACPI: SSDT DFFFF740, 07F7 (r1 BOCHS BXPCSSDT 1 BXPC 1
Mod-sfr 72> [ 0.000000] ACPI: APIC DFFFF610, 0088 (r1 BOCHS BXPCAPIC 1 BXPC 1
Mod-sfr 73> [ 0.000000] ACPI: HPET DFFFF5D0, 0038 (r1 BOCHS BXPCHPET 1 BXPC 1
Mod-sfr 74> [ 0.000000] No NUMA configuration found
Mod-sfr 75> [ 0.000000] Faking a node at 0000000000000000-0000000101e00000
Mod-sfr 76> [ 0.000000] Bootmem setup node 0 0000000000000000-0000000101e00000
Mod-sfr 77> [ 0.000000] NODE_DATA [0000000000001000 - 0000000000005fff]
Mod-sfr 78> [ 0.000000] bootmap [000000000000d000 - 000000000002d3bf] pages 21
Mod-sfr 79> [ 0.000000] (7 early reservations) ==> bootmem [0000000000 - 0101e00000]
Mod-sfr 80> [ 0.000000] #0 [0000000000 - 0000001000] BIOS data page ==> [0000000000 - 00
Mod-sfr 81> 00001000]
Mod-sfr 82> [ 0.000000] #1 [0000006000 - 0000008000] TRAMPOLINE ==> [0000006000 - 00
Mod-sfr 83> 00008000]
Mod-sfr 84> [ 0.000000] #2 [0000200000 - 0000ae86dc] TEXT DATA BSS ==> [0000200000 - 00
Mod-sfr 85> 00ae86dc]
Mod-sfr 86> [ 0.000000] #3 [007dbe1000 - 007ffff5d8] RAMDISK ==> [007dbe1000 - 00
Mod-sfr 87> 7ffff5d8]
Mod-sfr 88> [ 0.000000] #4 [000009fc00 - 0000100000] BIOS reserved ==> [000009fc00 - 00
Mod-sfr 89> 00100000]
Mod-sfr 90> [ 0.000000] #5 [0000008000 - 000000c000] PGTABLE ==> [0000008000 - 00
Mod-sfr 91> 0000c000]
Mod-sfr 92> [ 0.000000] #6 [000000c000 - 000000d000] PGTABLE ==> [000000c000 - 00
Mod-sfr 93> 0000d000]
Mod-sfr 94> [ 0.000000] found SMP MP-table at [ffff8800000fdab0] 000fdab0
Mod-sfr 95> [ 0.000000] Zone PFN ranges:
Mod-sfr 96> [ 0.000000] DMA 0x00000000 -> 0x00001000
Mod-sfr 97> [ 0.000000] DMA32 0x00001000 -> 0x00100000
Mod-sfr 98> [ 0.000000] Normal 0x00100000 -> 0x00101e00
Mod-sfr 99> [ 0.000000] Movable zone start PFN for each node
Mod-sfr 100> [ 0.000000] early_node_map[3] active PFN ranges
Mod-sfr 101> [ 0.000000] 0: 0x00000000 -> 0x0000009f
Mod-sfr 102> [ 0.000000] 0: 0x00000100 -> 0x000dfffe
Mod-sfr 103> [ 0.000000] 0: 0x00100000 -> 0x00101e00
Mod-sfr 104> [ 0.000000] ACPI: PM-Timer IO Port: 0xb008
Mod-sfr 105> [ 0.000000] ACPI: LAPIC (acpi_id[0x00] lapic_id[0x00] enabled)
Mod-sfr 106> [ 0.000000] ACPI: LAPIC (acpi_id[0x01] lapic_id[0x01] enabled)
Mod-sfr 107> [ 0.000000] ACPI: LAPIC (acpi_id[0x02] lapic_id[0x02] enabled)
Mod-sfr 108> [ 0.000000] ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1])
Mod-sfr 109> [ 0.000000] ACPI: IOAPIC (id[0x00] address[0xfec00000] gsi_base[0])
Mod-sfr 110> [ 0.000000] IOAPIC[0]: apic_id 0, version 0, address 0xfec00000, GSI 0-23
Mod-sfr 111> [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl)
Mod-sfr 112> [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level)
Mod-sfr 113> [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level)
Mod-sfr 114> [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level)
Mod-sfr 115> [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level)
Mod-sfr 116> [ 0.000000] ACPI: HPET id: 0x8086a201 base: 0xfed00000
Mod-sfr 117> [ 0.000000] Using ACPI (MADT) for SMP configuration information
Mod-sfr 118> [ 0.000000] SMP: Allowing 3 CPUs, 0 hotplug CPUs
Mod-sfr 119> [ 0.000000] Allocating PCI resources starting at e2000000 (gap: e0000000:1effc0
Mod-sfr 120> 00)
Mod-sfr 121> [ 0.000000] PERCPU: Allocating 53248 bytes of per cpu data
Mod-sfr 122> [ 0.000000] Built 1 zonelists in Node order, mobility grouping on. Total pages
Mod-sfr 123> : 908258
Mod-sfr 124> [ 0.000000] Policy zone: Normal
Mod-sfr 125> [ 0.000000] Kernel command line: initrd=initramfs.gz console=ttyS0,9600 BOOT_IM
Mod-sfr 126> AGE=bzImage
Mod-sfr 127> [ 0.000000] Initializing CPU#0
Mod-sfr 128> [ 0.000000] PID hash table entries: 4096 (order: 12, 32768 bytes)
Mod-sfr 129> [ 0.000000] Fast TSC calibration using PIT
Mod-sfr 130> [ 0.000000] Detected 2394.091 MHz processor.
Mod-sfr 131> [ 0.000999] Console: colour VGA+ 80x25
Mod-sfr 132> [ 0.000999] console [ttyS0] enabled
Mod-sfr 133> [ 0.000999] allocated 38010880 bytes of page_cgroup
Mod-sfr 134> [ 0.000999] please try cgroup_disable=memory option if you don't want
Mod-sfr 135> [ 0.000999] Checking aperture...
Mod-sfr 136> [ 0.000999] No AGP bridge found
Mod-sfr 137> [ 0.000999] PCI-DMA: Using software bounce buffering for IO (SWIOTLB)
Mod-sfr 138> [ 0.000999] Placing software IO TLB between 0x20000000 - 0x24000000
Mod-sfr 139> [ 0.000999] Memory: 3497472k/4225024k available (4733k kernel code, 524684k abs
Mod-sfr 140> ent, 202868k reserved, 2572k data, 544k init)
Mod-sfr 141> [ 0.000999] HPET: 3 timers in total, 0 timers will be used for per-cpu timer
Mod-sfr 142> [ 0.001007] Calibrating delay loop (skipped), value calculated using timer freq
Mod-sfr 143> uency.. 4788.18 BogoMIPS (lpj=2394091)
Mod-sfr 144> [ 0.002322] Security Framework initialized
Mod-sfr 145> [ 0.003559] Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes)
Mod-sfr 146> [ 0.006005] Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes)
Mod-sfr 147> [ 0.007103] Mount-cache hash table entries: 256
Mod-sfr 148> [ 0.007911] Initializing cgroup subsys ns
Mod-sfr 149> [ 0.008003] Initializing cgroup subsys cpuacct
Mod-sfr 150> [ 0.008455] Initializing cgroup subsys memory
Mod-sfr 151> [ 0.009038] CPU: L1 I cache: 32K, L1 D cache: 32K
Mod-sfr 152> [ 0.009555] CPU: L2 cache: 4096K
Mod-sfr 153> [ 0.010006] CPU 0/0x0 -> Node 0
Mod-sfr 154> [ 0.010356] ACPI: Core revision 20080926
Mod-sfr 155> [ 0.011857] Setting APIC routing to flat
Mod-sfr 156> [ 0.013363] ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1
Mod-sfr 157> [ 0.024274] CPU0: Intel QEMU Virtual CPU version 1.5.0 stepping 03
Mod-sfr 158> [ 0.025996] Booting processor 1 APIC 0x1 ip 0x6000
Mod-sfr 159> [ 0.000999] Initializing CPU#1
Mod-sfr 160> [ 0.000999] Calibrating delay using timer specific routine.. 4787.92 BogoMIPS (
Mod-sfr 161> lpj=2393964)
Mod-sfr 162> [ 0.000999] CPU: L1 I cache: 32K, L1 D cache: 32K
Mod-sfr 163> [ 0.000999] CPU: L2 cache: 4096K
Mod-sfr 164> [ 0.000999] CPU 1/0x1 -> Node 0
Mod-sfr 165> [ 0.096063] CPU1: Intel QEMU Virtual CPU version 1.5.0 stepping 03
Mod-sfr 166> [ 0.099191] checking TSC synchronization [CPU#0 -> CPU#1]: passed.
Mod-sfr 167> [ 0.100053] Booting processor 2 APIC 0x2 ip 0x6000
Mod-sfr 168> [ 0.000999] Initializing CPU#2
Mod-sfr 169> [ 0.000999] Calibrating delay using timer specific routine.. 4787.88 BogoMIPS (
Mod-sfr 170> lpj=2393944)
Mod-sfr 171> [ 0.000999] CPU: L1 I cache: 32K, L1 D cache: 32K
Mod-sfr 172> [ 0.000999] CPU: L2 cache: 4096K
Mod-sfr 173> [ 0.000999] CPU 2/0x2 -> Node 0
Mod-sfr 174> [ 0.172134] CPU2: Intel QEMU Virtual CPU version 1.5.0 stepping 03
Mod-sfr 175> [ 0.175141] checking TSC synchronization [CPU#0 -> CPU#2]: passed.
Mod-sfr 176> [ 0.175987] Brought up 3 CPUs
Mod-sfr 177> [ 0.176333] Total of 3 processors activated (14363.99 BogoMIPS).
Mod-sfr 178> [ 0.177189] net_namespace: 1280 bytes
Mod-sfr 179> [ 0.178086] NET: Registered protocol family 16
Mod-sfr 180> [ 0.179001] ACPI: bus type pci registered
Mod-sfr 181> [ 0.180024] PCI: Using configuration type 1 for base access
Mod-sfr 182> [ 0.196360] ACPI: Interpreter enabled
Mod-sfr 183> [ 0.196778] ACPI: (supports S0 S5)
Mod-sfr 184> [ 0.197069] ACPI: Using IOAPIC for interrupt routing
Mod-sfr 185> [ 0.201261] ACPI: No dock devices found.
Mod-sfr 186> [ 0.201982] ACPI: PCI Root Bridge [PCI0] (0000:00)
Mod-sfr 187> [ 0.204305] pci 0000:00:01.3: quirk: region b000-b03f claimed by PIIX4 ACPI
Mod-sfr 188> [ 0.204978] pci 0000:00:01.3: quirk: region b100-b10f claimed by PIIX4 SMB
Mod-sfr 189> [ 0.227222] ACPI: PCI Interrupt Link [LNKA] (IRQs 5 *10 11)
Mod-sfr 190> [ 0.228260] ACPI: PCI Interrupt Link [LNKB] (IRQs 5 *10 11)
Mod-sfr 191> [ 0.229126] ACPI: PCI Interrupt Link [LNKC] (IRQs 5 10 *11)
Mod-sfr 192> [ 0.229920] ACPI: PCI Interrupt Link [LNKD] (IRQs 5 10 *11)
Mod-sfr 193> [ 0.230220] ACPI: PCI Interrupt Link [LNKS] (IRQs *9)
Mod-sfr 194> [ 0.232102] SCSI subsystem initialized
Mod-sfr 195> [ 0.233002] usbcore: registered new interface driver usbfs
Mod-sfr 196> [ 0.233992] usbcore: registered new interface driver hub
Mod-sfr 197> [ 0.234565] usbcore: registered new device driver usb
Mod-sfr 198> [ 0.234988] PCI: Using ACPI for IRQ routing
Mod-sfr 199> [ 0.243993] cfg80211: Using static regulatory domain info
Mod-sfr 200> [ 0.244568] cfg80211: Regulatory domain: US
Mod-sfr 201> [ 0.244964] (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp)
Mod-sfr 202> [ 0.245759] (2402000 KHz - 2472000 KHz @ 40000 KHz), (600 mBi, 2700 mBm)
Mod-sfr 203> [ 0.245964] (5170000 KHz - 5190000 KHz @ 40000 KHz), (600 mBi, 2300 mBm)
Mod-sfr 204> [ 0.246964] (5190000 KHz - 5210000 KHz @ 40000 KHz), (600 mBi, 2300 mBm)
Mod-sfr 205> [ 0.247963] (5210000 KHz - 5230000 KHz @ 40000 KHz), (600 mBi, 2300 mBm)
Mod-sfr 206> [ 0.248963] (5230000 KHz - 5330000 KHz @ 40000 KHz), (600 mBi, 2300 mBm)
Mod-sfr 207> [ 0.249712] (5735000 KHz - 5835000 KHz @ 40000 KHz), (600 mBi, 3000 mBm)
Mod-sfr 208> [ 0.249963] cfg80211: Calling CRDA for country: US
Mod-sfr 209> [ 0.250980] NetLabel: Initializing
Mod-sfr 210> [ 0.251349] NetLabel: domain hash size = 128
Mod-sfr 211> [ 0.251963] NetLabel: protocols = UNLABELED CIPSOv4
Mod-sfr 212> [ 0.252522] NetLabel: unlabeled traffic allowed by default
Mod-sfr 213> [ 0.253282] hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0
Mod-sfr 214> [ 0.254087] hpet0: 3 comparators, 64-bit 100.000000 MHz counter
Mod-sfr 215> [ 0.259966] pnp: PnP ACPI init
Mod-sfr 216> [ 0.260327] ACPI: bus type pnp registered
Mod-sfr 217> [ 0.262259] pnp: PnP ACPI: found 9 devices
Mod-sfr 218> [ 0.262722] ACPI: ACPI bus type pnp unregistered
Mod-sfr 219> [ 0.269188] bus: 00 index 0 io port: [0x00-0xffff]
Mod-sfr 220> [ 0.269728] bus: 00 index 1 mmio: [0x000000-0xffffffffffffffff]
Mod-sfr 221> [ 0.270473] NET: Registered protocol family 2
Mod-sfr 222> [ 0.281104] IP route cache hash table entries: 131072 (order: 8, 1048576 bytes)
Mod-sfr 223> [ 0.283331] TCP established hash table entries: 524288 (order: 11, 8388608 byte
Mod-sfr 224> s)
Mod-sfr 225> [ 0.287512] TCP bind hash table entries: 65536 (order: 8, 1048576 bytes)
Mod-sfr 226> [ 0.288597] TCP: Hash tables configured (established 524288 bind 65536)
Mod-sfr 227> [ 0.289346] TCP reno registered
Mod-sfr 228> [ 0.293058] NET: Registered protocol family 1
Mod-sfr 229> [ 0.293631] checking if image is initramfs...<7>Switched to high resolution mod
Mod-sfr 230> e on CPU 2
Mod-sfr 231> [ 1.431669] it is
Mod-sfr 232> [ 2.690158] Freeing initrd memory: 36985k freed
Mod-sfr 233> [ 2.699392] Microcode Update Driver: v2.00 <tigran@aivazian.fsnet.co.uk>, Peter
Mod-sfr 234> Oruba
Mod-sfr 235> [ 2.705522] HugeTLB registered 2 MB page size, pre-allocated 0 pages
Mod-sfr 236> [ 2.706641] VFS: Disk quotas dquot_6.5.1
Mod-sfr 237> [ 2.707121] Dquot-cache hash table entries: 512 (order 0, 4096 bytes)
Mod-sfr 238> [ 2.708565] msgmni has been set to 6903
Mod-sfr 239> [ 2.709759] alg: No test for stdrng (krng)
Mod-sfr 240> [ 2.710356] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 252
Mod-sfr 241> [ 2.711186] io scheduler noop registered
Mod-sfr 242> [ 2.711647] io scheduler anticipatory registered
Mod-sfr 243> [ 2.712165] io scheduler deadline registered
Mod-sfr 244> [ 2.712699] io scheduler cfq registered (default)
Mod-sfr 245> [ 2.713237] LTT : ltt-relay init
Mod-sfr 246> [ 2.713623] ltt-control init
Mod-sfr 247> [ 2.744365] LTT : ltt-kprobes init
Mod-sfr 248> [ 2.744770] pci 0000:00:00.0: Limiting direct PCI/PCI transfers
Mod-sfr 249> [ 2.745452] pci 0000:00:01.0: PIIX3: Enabling Passive Release
Mod-sfr 250> [ 2.746105] pci 0000:00:01.0: Activating ISA DMA hang workarounds
Mod-sfr 251> [ 2.747955] pci_hotplug: PCI Hot Plug PCI Core version: 0.5
Mod-sfr 252> [ 2.749332] processor ACPI_CPU:00: registered as cooling_device0
Mod-sfr 253> [ 2.750207] processor ACPI_CPU:01: registered as cooling_device1
Mod-sfr 254> [ 2.751089] processor ACPI_CPU:02: registered as cooling_device2
Mod-sfr 255> [ 2.758534] Non-volatile memory driver v1.2
Mod-sfr 256> [ 2.759013] Linux agpgart interface v0.103
Mod-sfr 257> [ 2.759666] [drm] Initialized drm 1.1.0 20060810
Mod-sfr 258> [ 2.760227] Serial: 8250/16550 driver4 ports, IRQ sharing enabled
Mod-sfr 259> ÿ[ 3.005451] serial8250: ttyS0 at I/O 0x3f8 (irq = 4) is a 16550A
Mod-sfr 260> [ 3.250469] serial8250: ttyS1 at I/O 0x2f8 (irq = 3) is a 16550A
Mod-sfr 261> [ 3.251915] 00:06: ttyS0 at I/O 0x3f8 (irq = 4) is a 16550A
Mod-sfr 262> [ 3.252926] 00:07: ttyS1 at I/O 0x2f8 (irq = 3) is a 16550A
Mod-sfr 263> [ 3.253885] Floppy drive(s): fd0 is 1.44M, fd1 is 1.44M
Mod-sfr 264> [ 3.265962] FDC 0 is a S82078B
Mod-sfr 265> [ 3.269857] brd: module loaded
Mod-sfr 266> [ 3.271570] loop: module loaded
Mod-sfr 267> [ 3.272017] Intel(R) Gigabit Ethernet Network Driver - version 1.2.45-k2
Mod-sfr 268> [ 3.272792] Copyright (c) 2008 Intel Corporation.
Mod-sfr 269> [ 3.273412] pcnet32.c:v1.35 21.Apr.2008 tsbogend@alpha.franken.de
Mod-sfr 270> [ 3.274169] e100: Intel(R) PRO/100 Network Driver, 3.5.23-k6-NAPI
Mod-sfr 271> [ 3.274869] e100: Copyright(c) 1999-2006 Intel Corporation
Mod-sfr 272> [ 3.275646] sky2 driver version 1.22
Mod-sfr 273> [ 3.276449] console [netcon0] enabled
Mod-sfr 274> [ 3.276867] netconsole: network logging started
Mod-sfr 275> [ 3.277570] input: Macintosh mouse button emulation as /devices/virtual/input/i
Mod-sfr 276> nput0
Mod-sfr 277> [ 3.278888] Loading iSCSI transport class v2.0-870.
Mod-sfr 278> [ 3.280358] Driver 'sd' needs updating - please use bus_type methods
Mod-sfr 279> [ 3.281150] Driver 'sr' needs updating - please use bus_type methods
Mod-sfr 280> [ 3.283124] scsi0 : ata_piix
Mod-sfr 281> [ 3.283758] scsi1 : ata_piix
Mod-sfr 282> [ 3.284258] ata1: PATA max MWDMA2 cmd 0x1f0 ctl 0x3f6 bmdma 0xc0c0 irq 14
Mod-sfr 283> [ 3.285036] ata2: PATA max MWDMA2 cmd 0x170 ctl 0x376 bmdma 0xc0c8 irq 15
Mod-sfr 284> [ 3.436610] ata1.00: ATA-7: QEMU HARDDISK, 1.5.0, max UDMA/100
Mod-sfr 285> [ 3.437290] ata1.00: 6291456 sectors, multi 16: LBA48
Mod-sfr 286> [ 3.438308] ata1.00: configured for MWDMA2
Mod-sfr 287> [ 3.590609] ata2.00: ATAPI: QEMU DVD-ROM, 1.5.0, max UDMA/100
Mod-sfr 288> [ 3.591713] ata2.00: configured for MWDMA2
Mod-sfr 289> [ 3.592487] scsi 0:0:0:0: Direct-Access ATA QEMU HARDDISK 1.5. PQ:
Mod-sfr 290> 0 ANSI: 5
Mod-sfr 291> [ 3.593641] sd 0:0:0:0: [sda] 6291456 512-byte hardware sectors: (3.22 GB/3.00
Mod-sfr 292> GiB)
Mod-sfr 293> [ 3.594518] sd 0:0:0:0: [sda] Write Protect is off
Mod-sfr 294> [ 3.595091] sd 0:0:0:0: [sda] Write cache: enabled, read cache: enabled, doesn'
Mod-sfr 295> t support DPO or FUA
Mod-sfr 296> [ 3.596189] sd 0:0:0:0: [sda] 6291456 512-byte hardware sectors: (3.22 GB/3.00
Mod-sfr 297> GiB)
Mod-sfr 298> [ 3.597076] sd 0:0:0:0: [sda] Write Protect is off
Mod-sfr 299> [ 3.597651] sd 0:0:0:0: [sda] Write cache: enabled, read cache: enabled, doesn'
Mod-sfr 300> t support DPO or FUA
Mod-sfr 301> [ 3.598672] sda: unknown partition table
Mod-sfr 302> [ 3.599808] sd 0:0:0:0: [sda] Attached SCSI disk
Mod-sfr 303> [ 3.600485] sd 0:0:0:0: Attached scsi generic sg0 type 0
Mod-sfr 304> [ 3.601437] scsi 1:0:0:0: CD-ROM QEMU QEMU DVD-ROM 1.5. PQ:
Mod-sfr 305> 0 ANSI: 5
Mod-sfr 306> [ 3.602882] sr0: scsi3-mmc drive: 4x/4x cd/rw xa/form2 tray
Mod-sfr 307> [ 3.603521] Uniform CD-ROM driver Revision: 3.20
Mod-sfr 308> [ 3.604314] sr 1:0:0:0: Attached scsi generic sg1 type 5
Mod-sfr 309> [ 3.605189] Fusion MPT base driver 3.04.07
Mod-sfr 310> [ 3.605652] Copyright (c) 1999-2008 LSI Corporation
Mod-sfr 311> [ 3.606223] Fusion MPT SPI Host driver 3.04.07
Mod-sfr 312> [ 3.606809] Fusion MPT FC Host driver 3.04.07
Mod-sfr 313> [ 3.607417] Fusion MPT SAS Host driver 3.04.07
Mod-sfr 314> [ 3.608251] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
Mod-sfr 315> [ 3.609066] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
Mod-sfr 316> [ 3.609838] uhci_hcd: USB Universal Host Controller Interface driver
Mod-sfr 317> [ 3.610751] usbcore: registered new interface driver usblp
Mod-sfr 318> [ 3.611382] Initializing USB Mass Storage driver...
Mod-sfr 319> [ 3.612003] usbcore: registered new interface driver usb-storage
Mod-sfr 320> [ 3.612690] USB Mass Storage support registered.
Mod-sfr 321> [ 3.613299] usbcore: registered new interface driver libusual
Mod-sfr 322> [ 3.614099] PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,1
Mod-sfr 323> [ 3.615569] serio: i8042 KBD port at 0x60,0x64 irq 1
Mod-sfr 324> [ 3.616190] serio: i8042 AUX port at 0x60,0x64 irq 12
Mod-sfr 325> [ 3.620420] mice: PS/2 mouse device common for all mice
Mod-sfr 326> [ 3.623849] rtc_cmos 00:01: RTC can wake from S4
Mod-sfr 327> [ 3.624457] input: AT Translated Set 2 keyboard as /devices/platform/i8042/seri
Mod-sfr 328> o0/input/input1
Mod-sfr 329> [ 3.624493] rtc_cmos 00:01: rtc core: registered rtc_cmos as rtc0
Mod-sfr 330> [ 3.624620] rtc0: alarms up to one day, 114 bytes nvram, hpet irqs
Mod-sfr 331> [ 3.624673] i2c /dev entries driver
Mod-sfr 332> [ 3.624822] md: raid1 personality registered for level 1
Mod-sfr 333> [ 3.627997] device-mapper: ioctl: 4.14.0-ioctl (2008-04-23) initialised: dm-dev
Mod-sfr 334> el@redhat.com
Mod-sfr 335> [ 3.628956] cpuidle: using governor ladder
Mod-sfr 336> [ 3.629443] cpuidle: using governor menu
Mod-sfr 337> [ 3.629895] No iBFT detected.
Mod-sfr 338> [ 3.631462] usbcore: registered new interface driver hiddev
Mod-sfr 339> [ 3.632137] usbcore: registered new interface driver usbhid
Mod-sfr 340> [ 3.632816] usbhid: v2.6:USB HID core driver
Mod-sfr 341> [ 3.633493] ACPI: PCI Interrupt Link [LNKA] enabled at IRQ 10
Mod-sfr 342> [ 3.634151] virtio-pci 0000:00:05.0: PCI INT A -> Link[LNKA] -> GSI 10 (level,
Mod-sfr 343> high) -> IRQ 10
Mod-sfr 344> [ 3.635827] ACPI: PCI Interrupt Link [LNKB] enabled at IRQ 11
Mod-sfr 345> [ 3.636526] virtio-pci 0000:00:06.0: PCI INT A -> Link[LNKB] -> GSI 11 (level,
Mod-sfr 346> high) -> IRQ 11
Mod-sfr 347> [ 3.638209] ACPI: PCI Interrupt Link [LNKD] enabled at IRQ 11
Mod-sfr 348> [ 3.638880] virtio-pci 0000:00:08.0: PCI INT A -> Link[LNKD] -> GSI 11 (level,
Mod-sfr 349> high) -> IRQ 11
Mod-sfr 350> [ 3.640959] vda: vda1
Mod-sfr 351> [ 3.643004] Advanced Linux Sound Architecture Driver Version 1.0.18rc3.
Mod-sfr 352> [ 3.645040] ALSA device list:
Mod-sfr 353> [ 3.645432] No soundcards found.
Mod-sfr 354> [ 3.645893] Netfilter messages via NETLINK v0.30.
Mod-sfr 355> [ 3.646468] nf_conntrack version 0.5.0 (16384 buckets, 65536 max)
Mod-sfr 356> [ 3.647272] ctnetlink v0.93: registering with nfnetlink.
Mod-sfr 357> [ 3.648139] IPv4 over IPv4 tunneling driver
Mod-sfr 358> [ 3.649176] ip_tables: (C) 2000-2006 Netfilter Core Team
Mod-sfr 359> [ 3.649853] TCP cubic registered
Mod-sfr 360> [ 3.650335] Initializing XFRM netlink socket
Mod-sfr 361> [ 3.650966] NET: Registered protocol family 10
Mod-sfr 362> [ 3.651925] lo: Disabled Privacy Extensions
Mod-sfr 363> [ 3.653057] tunl0: Disabled Privacy Extensions
Mod-sfr 364> [ 3.653913] ip6_tables: (C) 2000-2006 Netfilter Core Team
Mod-sfr 365> [ 3.654586] IPv6 over IPv4 tunneling driver
Mod-sfr 366> [ 3.655429] sit0: Disabled Privacy Extensions
Mod-sfr 367> [ 3.656210] NET: Registered protocol family 17
Mod-sfr 368> [ 3.657056] RPC: Registered udp transport module.
Mod-sfr 369> [ 3.657609] RPC: Registered tcp transport module.
Mod-sfr 370> [ 3.658405] registered taskstats version 1
Mod-sfr 371> [ 3.851301] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/s
Mod-sfr 372> erio1/input/input2
Mod-sfr 373> [ 5.161037] Sending DHCP and RARP requests ...<7>eth1: no IPv6 routers present
Mod-sfr 374> [ 18.661352] ... timed out!
Mod-sfr 375> [ 80.598727] IP-Config: Reopening network devices...
Mod-sfr 376> [ 82.101038] Sending DHCP and RARP requests ...<7>eth0: no IPv6 routers present
ciscoasa# sw-module module sfr recover boot debug module-boot Mod-sfr 377> [ 96.707352] ... timed out!
Mod-sfr 378> [ 161.449733] IP-Config: Auto-configuration of network failed.
Mod-sfr 379> [ 161.450403] Freeing unused kernel memory: 544k freed
Mod-sfr 380> INIT: version 2.86 booting
Mod-sfr 381> Please wait: booting...
Mod-sfr 382> mount: sysfs already mounted or /sys busy
Mod-sfr 383> mount: according to mtab, sysfs is already mounted on /sys
Mod-sfr 384> Starting udev [ 161.504797] udevd version 124 started
Mod-sfr 385> [ 161.618022] udev: renamed network interface eth0 to cplane
Mod-sfr 386> [ 161.620822] udev: renamed network interface eth1 to eth0
Mod-sfr 387> [ 162.148045] end_request: I/O error, dev fd0, sector 0
Mod-sfr 388> [ 162.168044] end_request: I/O error, dev fd0, sector 0
Mod-sfr 389> and populating dev cache
Mod-sfr 390> Root filesystem already rw, not remounting
Mod-sfr 391> Configuring network interfaces... done.
Mod-sfr 392> net.ipv4.conf.default.rp_filter = 1
Mod-sfr 393> net.ipv4.conf.all.rp_filter = 1
Mod-sfr 394> Configuring kvm-ivshmem
Mod-sfr 395> Configuring busybox-syslog
Mod-sfr 396> System startup links for /etc/init.d/sysklogd already exist.
Mod-sfr 397> Configuring openssh-sshd
Mod-sfr 398> Adding system startup for /etc/init.d/sshd.
Mod-sfr 399> Configuring sudo
Mod-sfr 400> Configuring ntpdate
Mod-sfr 401> adding crontab
Mod-sfr 402> Configuring update-modules
Mod-sfr 403> INIT: Entering runlevel: 5
Mod-sfr 404> Starting OpenBSD Secure Shell server: sshd
Mod-sfr 405> generating ssh RSA key...
Mod-sfr 406> generating ssh DSA key...
Mod-sfr 407> done.
Mod-sfr 408> Starting Advanced Configuration and Power Interface daemon: acpid.
Mod-sfr 409> acpid: starting up with proc fs
Mod-sfr 410> acpid: opendir(/etc/acpi/events): No such file or directory
Mod-sfr 411> starting Busybox inetd: inetd... done.
Mod-sfr 412> Starting ntpd: done
Mod-sfr 413> Starting syslogd/klogd: done
Mod-sfr 414> Cisco FirePOWER Services Boot Image 6.0.0 // TOOK 5-10 MINS TO FINISH
ciscoasa# no debug module-boot // DISABLE DEBUG
debug module-boot disabled.
ciscoasa# debug module-boot // YOU CAN RETAIN THE DEBUG TO OBSERVE .pkg INSTALL
The FirePower (sfr) module will remain in Recover status. You'll need to console to the module, install the package file to complete the upgrade.
ciscoasa# show module sfr
Mod Card Type Model Serial No.
---- -------------------------------------------- ------------------ -----------
sfr Unknown N/A FCH2124J0P7
Mod MAC Address Range Hw Version Fw Version Sw Version
---- --------------------------------- ------------ ------------ ---------------
sfr 4001.7ab9.6dd2 to 4001.7ab9.6dd2 N/A N/A
Mod SSM Application Name Status SSM Application Version
---- ------------------------------ ---------------- --------------------------
Mod Status Data Plane Status Compatibility
---- ------------------ --------------------- -------------
sfr Recover Not Applicable
ciscoasa# session sfr console
Opening console session with module sfr.
Connected to module sfr. Escape character sequence is 'CTRL-^X'.
asasfr login: admin
Password: Admin123
Cisco FirePOWER Services Boot 6.0.0 (1005)
Type ? for list of commands
asasfr-boot>system ?
reload => Reload the system
install => Install the system software
shutdown => Shut down the system. Manual restart will be required
asasfr-boot>system install ftp://ftp:ftp123@192.168.1.2/asasfr-sys-6.0.0-1005.pkg
Verifying.
113
Upgrade aborted.
You'll need to configure the FirePower module IP address via the setup command in order to FTP (or HTTP) the package (.pkg) file. Connect a straight cable between the FTP PC (192.168.1.2/24) and ASA MGMT port. You just need to unshut (no shutdown) the MGMT interface and may leave the IP address blank. Just configure the FirePower module with basic IP address settings for FTP connectivity. Hit 'Enter' on other configuration since the final FirePower settings will be done after the package (.pkg) has been installed.
You can configure the IP address for the ASA MGMT interface and FirePower module (eth0) to be on the same subnet since the management function are independent of each other.
ciscoasa# show run interface Management0/0
!
interface Management0/0
management-only
shutdown
no nameif
no security-level
no ip address
ciscoasa# configure terminal
ciscoasa(config)# interface Management0/0
ciscoasa(config-if)# no shutdown
ciscoasa(config-if)# show run int Management0/0
!
interface Management0/0
management-only
no nameif
security-level 100
no ip address
ciscoasa(config-if)# session sfr console
Opening console session with module sfr.
Connected to module sfr. Escape character sequence is 'CTRL-^X'.
asasfr-boot>setup
Welcome to Cisco FirePOWER Services Setup
[hit Ctrl-C to abort]
Default values are inside []
Enter a hostname [asasfr]:
Do you want to configure IPv4 address on management interface?(y/n) [Y]:
Do you want to enable DHCP for IPv4 address assignment on management interface?(y/n) [N]:
Enter an IPv4 address [192.168.8.8]:192.168.1.1
Enter the netmask [255.255.255.0]:
Enter the gateway [192.168.8.1]:192.168.1.1
Do you want to configure static IPv6 address on management interface?(y/n) [N]:
Stateless autoconfiguration will be enabled for IPv6 addresses.
Enter the primary DNS server IP address [8.8.8.8]:
Do you want to configure Secondary DNS Server? (y/n) [n]:
Do you want to configure Local Domain Name? (y/n) [n]:
Do you want to configure Search domains? (y/n) [n]:
Do you want to enable the NTP service? [Y]:
Please review the final configuration:
Hostname: asasfr
Management Interface Configuration
IPv4 Configuration: static
IP Address: 192.168.1.1
Netmask: 255.255.255.0
Gateway: 192.168.1.1
IPv6 Configuration: Stateless autoconfiguration
DNS Configuration:
DNS Server:
8.8.8.8
NTP configuration: Disabled
CAUTION
You have selected IPv6 stateless autoconfiguration, which assigns a global address
based on network prefix and a device identifier. Although this address is unlikely
to change, if it does change, the system will stop functioning correctly.
We suggest you use static addressing instead.
Apply the changes?(y,n) [Y]:
Configuration saved successfully!
Applying...
Done.
Press ENTER to continue...
asasfr-boot> system install ftp://ftp:ftp123@192.168.1.2/asasfr-sys-6.0.0-1005.pkg
Verifying...
Downloading...
Extracting...
<OUTPUT TRUNCATED>
Package Detail
Description: Cisco ASA-SFR 6.0.0-1005 System Install
Requires reboot: Yes
Do you want to continue with upgrade? [y]:
Warning: Please do not interrupt the process or turn off the system.
Doing so might leave system in unusable state.
Upgrading...
Starting upgrade process ....
Populating new system image.
<OUTPUT TRUNCATED>
Reboot is required to complete the upgrade. Press 'Enter' to reboot the system. // HIT 'ENTER'
Broadcast message from root (ttyS1) (Thu Jun 8 23:08:50 2017):
The system is going down for reboot NOW!
Console session with module sfr terminated.
ciscoasa# show module
Mod Card Type Model Serial No.
---- -------------------------------------------- ------------------ -----------
0 ASA 5525-X with SW, 8 GE Data, 1 GE Mgmt, AC ASA5525 FCH1834J123
ips Unknown N/A FCH1834J123
cxsc Unknown N/A FCH1834J123
sfr Unknown N/A FCH1834J123
Mod MAC Address Range Hw Version Fw Version Sw Version
---- --------------------------------- ------------ ------------ ---------------
0 fc5b.39aa.5164 to fc5b.39aa.5abc 1.0 2.1(9)8 9.4(3)12
ips fc5b.39aa.5162 to fc5b.39aa.5abc N/A N/A
cxsc fc5b.39aa.5162 to fc5b.39aa.5abc N/A N/A
sfr fc5b.39aa.5162 to fc5b.39aa.5abc N/A N/A
Mod SSM Application Name Status SSM Application Version
---- ------------------------------ ---------------- --------------------------
ips Unknown No Image Present Not Applicable
cxsc Unknown No Image Present Not Applicable
Mod Status Data Plane Status Compatibility
---- ------------------ --------------------- -------------
0 Up Sys Not Applicable
ips Unresponsive Not Applicable
cxsc Unresponsive Not Applicable
sfr Recover Not Applicable
Mod License Name License Status Time Remaining
---- -------------- --------------- ---------------
ips IPS Module Disabled perpetual
The FirePower package installation took around 15-20 mins for the FirePower upgrade to finish. You can observe the 'HD' LED light at the back of the chassis if it's already steady green. Use the show module command to verify the SFR status and should see it as UP.
ciscoasa# show module
Mod Card Type Model Serial No.
---- -------------------------------------------- ------------------ -----------
0 ASA 5525-X with SW, 8 GE Data, 1 GE Mgmt, AC ASA5525 FCH1834J123
ips Unknown N/A FCH1834J123
cxsc Unknown N/A FCH1834J123
sfr FirePOWER Services Software Module ASA5525 FCH1834J123
Mod MAC Address Range Hw Version Fw Version Sw Version
---- --------------------------------- ------------ ------------ ---------------
0 fc5b.39aa.5164 to fc5b.39aa.5abc 1.0 2.1(9)8 9.4(3)12
ips fc5b.39aa.5162 to fc5b.39aa.5abc N/A N/A
cxsc fc5b.39aa.5162 to fc5b.39aa.5abc N/A N/A
sfr fc5b.39aa.5162 to fc5b.39aa.5abc N/A N/A 6.0.0-1005
Mod SSM Application Name Status SSM Application Version
---- ------------------------------ ---------------- --------------------------
ips Unknown No Image Present Not Applicable
cxsc Unknown No Image Present Not Applicable
sfr ASA FirePOWER Up 6.0.0-1005
Mod Status Data Plane Status Compatibility
---- ------------------ --------------------- -------------
0 Up Sys Not Applicable
ips Unresponsive Not Applicable
cxsc Unresponsive Not Applicable
sfr Up Up
Mod License Name License Status Time Remaining
---- -------------- --------------- ---------------
ips IPS Module Disabled perpetual
ciscoasa# show module sfr
Mod Card Type Model Serial No.
---- -------------------------------------------- ------------------ -----------
sfr FirePOWER Services Software Module ASA5525 FCH1834J6E8
Mod MAC Address Range Hw Version Fw Version Sw Version
---- --------------------------------- ------------ ------------ ---------------
sfr fc5b.39aa.5162 to fc5b.39aa.5abc N/A N/A 6.0.0-1005
Mod SSM Application Name Status SSM Application Version
---- ------------------------------ ---------------- --------------------------
sfr ASA FirePOWER Up 6.0.0-1005
Mod Status Data Plane Status Compatibility
---- ------------------ --------------------- -------------
sfr Up Up
ciscoasa# show module sfr ?
details show detailed hardware module information
log show logs for this module
recover show recover configuration for this module
| Output modifiers
<cr>
ciscoasa# show module sfr details
Getting details from the Service Module, please wait...
Card Type: FirePOWER Services Software Module
Model: ASA5525
Hardware version: N/A
Serial Number: FCH1834J123
Firmware version: N/A
Software version: 6.0.0-1005
MAC Address Range: fc5b.39aa.5162 to fc5b.39aa.5abc
App. name: ASA FirePOWER
App. Status: Up
App. Status Desc: Normal Operation
App. version: 6.0.0-1005
Data Plane Status: Up
Console session: Ready
Status: Up
DC addr: No DC Configured
Mgmt IP addr: 192.168.45.45
Mgmt Network mask: 255.255.255.0
Mgmt Gateway: 0.0.0.0
Mgmt web ports: 443
Mgmt TLS enabled: true
The package (.pkg) file is not visible in the show flash or dir output but it would be permanent even if you reboot the ASA. If you reboot the ASA the SFR module will show as INIT and then becomes UP after a couple of minutes.
ciscoasa# dir
Directory of disk0:/
11 drwx 4096 19:16:16 Sep 29 2014 log
22 drwx 4096 19:16:44 Sep 29 2014 crypto_archive
23 drwx 4096 19:16:52 Sep 29 2014 coredumpinfo
123 -rwx 37656576 19:25:02 Sep 29 2014 asa913-smp-k8.bin
124 -rwx 22658960 19:27:04 Sep 29 2014 asdm-714.bin
125 -rwx 73285632 00:38:08 Jun 06 2017 asa943-12-smp-k8.bin
126 -rwx 25819140 00:42:58 Jun 06 2017 asdm-761.bin
127 -rwx 12998641 19:51:42 Sep 29 2014 csd_3.5.2008-k9.pkg
128 drwx 4096 19:51:44 Sep 29 2014 sdesktop
129 -rwx 6487517 19:51:44 Sep 29 2014 anyconnect-macosx-i386-2.5.2014-k9.pkg
130 -rwx 6689498 19:51:44 Sep 29 2014 anyconnect-linux-2.5.2014-k9.pkg
131 -rwx 4678691 19:51:44 Sep 29 2014 anyconnect-win-2.5.2014-k9.pkg
132 -rwx 100 22:45:26 Jun 05 2017 upgrade_startup_errors_201706052245.log
133 -rwx 41848832 18:55:08 Jun 08 2017 asasfr-5500x-boot-6.0.0-1005.img
8238202880 bytes total (4782514176 bytes free)
ciscoasa# show module
Mod Card Type Model Serial No.
---- -------------------------------------------- ------------------ -----------
0 ASA 5525-X with SW, 8 GE Data, 1 GE Mgmt, AC ASA5525 FCH1834J123
ips Unknown N/A FCH1834J123
cxsc Unknown N/A FCH1834J123
sfr Unknown N/A FCH1834J123
Mod MAC Address Range Hw Version Fw Version Sw Version
---- --------------------------------- ------------ ------------ ---------------
0 fc5b.39aa.5164 to fc5b.39aa.5abc 1.0 2.1(9)8 9.4(3)12
ips fc5b.39aa.5162 to fc5b.39aa.5abc N/A N/A
cxsc fc5b.39aa.5162 to fc5b.39aa.5abc N/A N/A
sfr fc5b.39aa.5162 to fc5b.39aa.5abc N/A N/A
Mod SSM Application Name Status SSM Application Version
---- ------------------------------ ---------------- --------------------------
ips Unknown No Image Present Not Applicable
cxsc Unknown No Image Present Not Applicable
Mod Status Data Plane Status Compatibility
---- ------------------ --------------------- -------------
0 Up Sys Not Applicable
ips Unresponsive Not Applicable
cxsc Unresponsive Not Applicable
sfr Init Not Applicable // SFR WILL SHOW AS UP AFTER FEW MINS
Mod License Name License Status Time Remaining
---- -------------- --------------- ---------------
ips IPS Module Disabled perpetual
ciscoasa# session sfr console
Opening console session with module sfr.
Connected to module sfr. Escape character sequence is 'CTRL-^X'.
Cisco ASA5525 v6.0.0 (build 1005)
firepower login: admin
Password: Admin123
Last login: Fri Jun 9 00:04:17 UTC 2017 on ttyS1
Copyright 2004-2015, Cisco and/or its affiliates. All rights reserved.
Cisco is a registered trademark of Cisco Systems, Inc.
All other trademarks are property of their respective owners.
Cisco Fire Linux OS v6.0.0 (build 258)
Cisco ASA5525 v6.0.0 (build 1005)
Last login: Thu Jun 8 23:21:29 UTC 2017
Last login: Fri Jun 9 00:04:17 UTC 2017 on ttyS1
You must accept the EULA to continue.
Press <ENTER> to display the EULA: // HIT 'ENTER'
END USER LICENSE AGREEMENT
IMPORTANT: PLEASE READ THIS END USER LICENSE AGREEMENT CAREFULLY. IT IS VERY IMPORTANT THAT YOU CHECK THAT YOU ARE PURCHASING CISCO SOFTWARE OR EQUIPMENT FROM AN APPROVED SOURCE AND THAT YOU, OR THE ENTITY YOU REPRESENT (COLLECTIVELY, THE "CUSTOMER") HAVE BEEN REGISTERED AS THE END USER FOR THE PURPOSES OF THIS CISCO END USER LICENSE AGREEMENT. IF YOU ARE NOT REGISTERED AS THE END USER YOU HAVE NO LICENSE TO USE THE SOFTWARE AND THE LIMITED WARRANTY IN THIS END USER LICENSE AGREEMENT DOES NOT APPLY. ASSUMING YOU HAVE PURCHASED FROM AN APPROVED SOURCE, DOWNLOADING, INSTALLING OR USING CISCO OR CISCO-SUPPLIED SOFTWARE CONSTITUTES ACCEPTANCE OF THIS AGREEMENT.
<OUTPUT TRUNCATED>
Product warranty terms and other information applicable to Cisco products are
available at the following URL: http://www.cisco.com/go/warranty.
Please enter 'YES' or press <ENTER> to AGREE to the EULA: // HIT 'ENTER'
System initialization in progress. Please stand by.
You must change the password for 'admin' to continue.
Enter new password: cisco123 // NOT A GOOD PASSWORD IN PRODUCTION NETWORK
Confirm new password: cisco123
You must configure the network to continue.
You must configure at least one of IPv4 or IPv6.
Do you want to configure IPv4? (y/n) [y]:
Do you want to configure IPv6? (y/n) [n]:
Configure IPv4 via DHCP or manually? (dhcp/manual) [manual]:
Enter an IPv4 address for the management interface [192.168.45.45]: 172.27.25.253
Enter an IPv4 netmask for the management interface [255.255.255.0]:
Enter the IPv4 default gateway for the management interface []: 172.27.25.1
Enter a fully qualified hostname for this system [firepower]: lab-firepower
Enter a comma-separated list of DNS servers or 'none' []: 8.8.8.8
Enter a comma-separated list of search domains or 'none' [example.net]: none
If your networking information has changed, you will need to reconnect.
For HTTP Proxy configuration, run 'configure network http-proxy'
Creating default Identity Policy.
Creating default SSL Policy.
Update policy deployment information
- add device configuration
- add network discovery
- add system policy
- add access control policy
- applying access control policy
You can register the sensor to a Firepower Management Center and use the
Firepower Management Center to manage it. Note that registering the sensor
to a Firepower Management Center disables on-sensor Firepower Services
management capabilities.
When registering the sensor to a Firepower Management Center, a unique
alphanumeric registration key is always required. In most cases, to register
a sensor to a Firepower Management Center, you must provide the hostname or
the IP address along with the registration key.
'configure manager add [hostname | ip address ] [registration key ]'
However, if the sensor and the Firepower Management Center are separated by a
NAT device, you must enter a unique NAT ID, along with the unique registration key.
'configure manager add DONTRESOLVE [registration key ] [ NAT ID ]'
Later, using the web interface on the Firepower Management Center, you must
use the same registration key and, if necessary, the same NAT ID when you add
this sensor to the Firepower Management Center.
>
configure Change to Configuration mode
end Return to the default mode
exit Exit this CLI session
expert Invoke a shell
help Display an overview of the CLI syntax
history Display the current session's command line history
logout Logout of the current CLI session
show Change to Show Mode
system Change to System Mode
> show
access-control-config Show Current Access-Control Configuration
audit-log Show audit log
cpu Show CPU utilization
database Change to Show Database Mode
device-settings Show device settings
disk Show disk usage
disk-manager Display current status of local disk(s)
dns Show DNS configuration
hostname Show hostname
hosts Show hosts
ifconfig Show currently configured interfaces
interfaces Show interface configuration
kdump Display status of kernel crash dump feature
log-events-to-ramdisk Display Logging of Events to hard disk
log-ips-connection Display Logging of Connection Events setting
managers Show managing Defense Centers
memory Show available memory
model Show model
netstat Show network connections
network Show configuration of management interface
network-static-routes Show static routes for management interfaces
ntp Show NTP configuration
perfstats Show perfstats
process-tree Show processes in tree format
processes Show processes
route Show configured routes
serial-number Show serial number
ssl-policy-config Show Current SSL Policy Configuration
summary Show summary
time Show time
traffic-statistics Show traffic statistics
user Show specified users
users Show all users
version Show versions
> show version
-----------------[ lab-firepower ]------------------
Model : ASA5525 (72) Version 6.0.0 (Build 1005)
UUID : 8a8a8310-4c9f-11e7-a92a-8909aa1a5123
Rules update version : 2015-10-01-001-vrt
VDB version : 252
----------------------------------------------------
> show summary
-----------------[ lab-firepower ]------------------
Model : ASA5525 (72) Version 6.0.0 (Build 1005)
UUID : 8a8a8310-4c9f-11e7-a92a-8909aa1a5123
Rules update version : 2015-10-01-001-vrt
VDB version : 252
----------------------------------------------------
Access control policy not yet applied.
> show ifconfig
cplane Link encap:Ethernet HWaddr 00:00:00:04:01:23
inet addr:127.0.4.1 Bcast:127.0.255.255 Mask:255.255.0.0
inet6 addr: fe80::200:ff:fe04:1/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:501 errors:0 dropped:0 overruns:0 frame:0
TX packets:92 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:31930 (31.1 Kb) TX bytes:8178 (7.9 Kb)
eth0 Link encap:Ethernet HWaddr FC:5B:39:AA:51:23
inet addr:172.27.25.253 Bcast:172.27.25.255 Mask:255.255.255.0
inet6 addr: fe80::fe5b:39ff:feaa:5162/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:204 errors:0 dropped:0 overruns:0 frame:0
TX packets:68 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:17518 (17.1 Kb) TX bytes:3288 (3.2 Kb)
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.255.255.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:874 errors:0 dropped:0 overruns:0 frame:0
TX packets:874 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:6119854 (5.8 Mb) TX bytes:6119854 (5.8 Mb)
tun1 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:169.254.0.1 P-t-P:169.254.0.1 Mask:255.255.0.0
inet6 addr: fdcc::bd:0:ffff:a9fe:1/64 Scope:Global
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:500
RX bytes:0 (0.0 b) TX bytes:0 (0.0 b)
> show interfaces
---------------------[ inside ]---------------------
Physical Interface : GigabitEthernet0/1
Type : ASA
Security Zone : None
Status : Enabled
Load Balancing Mode : N/A
---------------------[ cplane ]---------------------
IPv4 Address : 127.0.4.1
----------------------[ eth0 ]----------------------
Physical Interface : eth0
Type : Management
Status : Enabled
MDI/MDIX : Auto
MTU : 1500
MAC Address : FC:5B:39:AA:51:23
IPv4 Address : 172.27.25.253
----------------------[ tun1 ]----------------------
IPv6 Address : fdcc::bd:0:ffff:a9fe:1/64
---------------------[ tunl0 ]----------------------
----------------------------------------------------
> expert // GO TO LINUX SHELL
admin@lab-firepower:~$ sudo ping 172.2.8.3 // FIRESIGHT MANAGEMENT CENTER (FMC) IP
PING 172.2.8.3 (172.2.8.3) 56(84) bytes of data.
64 bytes from 172.2.8.3:icmp_req=1 ttl=56 time=347 ms
64 bytes from 172.2.8.3:icmp_req=1 ttl=56 time=347 ms
64 bytes from 172.2.8.3:icmp_req=1 ttl=56 time=347 ms
64 bytes from 172.2.8.3:icmp_req=1 ttl=56 time=347 ms
64 bytes from 172.2.8.3:icmp_req=1 ttl=56 time=347 ms
64 bytes from 172.2.8.3:icmp_req=1 ttl=56 time=347 ms
64 bytes from 172.2.8.3:icmp_req=1 ttl=56 time=347 ms
64 bytes from 172.2.8.3:icmp_req=1 ttl=56 time=347 ms
64 bytes from 172.2.8.3:icmp_req=1 ttl=56 time=347 ms
64 bytes from 172.2.8.3:icmp_req=1 ttl=56 time=347 ms
^C
--- 172.2.8.3 ping statistics ---
10 packets transmitted, 10 received, 0% packet loss, time 9006ms
rtt min/avg/max/mdev = 346.345/347.605/349.714/1.312 ms
ciscoasa# show version
Cisco Adaptive Security Appliance Software Version 9.4(3)12
Device Manager Version 7.6(1)
Compiled on Thu 20-Oct-16 17:58 PDT by builders
System image file is "disk0:/asa943-12-smp-k8.bin"
Config file at boot was "startup-config"
ciscoasa up 2 days 18 hours
Hardware: ASA5525, 8192 MB RAM, CPU Lynnfield 2394 MHz, 1 CPU (4 cores)
ASA: 4096 MB RAM, 1 CPU (1 core)
Internal ATA Compact Flash, 8192MB
BIOS Flash MX25L6445E @ 0xffbb0000, 8192KB
Encryption hardware device : Cisco ASA Crypto on-board accelerator (revision 0x1)
Boot microcode : CNPx-MC-BOOT-2.00
SSL/IKE microcode : CNPx-MC-SSL-SB-PLUS-0005
IPSec microcode : CNPx-MC-IPSEC-MAIN-0026
Number of accelerators: 1
Baseboard Management Controller (revision 0x1) Firmware Version: 2.4
0: Int: Internal-Data0/0 : address is fc5b.39aa.5164, irq 11
1: Ext: GigabitEthernet0/0 : address is fc5b.39aa.5169, irq 5
2: Ext: GigabitEthernet0/1 : address is fc5b.39aa.5165, irq 5
3: Ext: GigabitEthernet0/2 : address is fc5b.39aa.516a, irq 10
4: Ext: GigabitEthernet0/3 : address is fc5b.39aa.5166, irq 10
5: Ext: GigabitEthernet0/4 : address is fc5b.39aa.516b, irq 5
6: Ext: GigabitEthernet0/5 : address is fc5b.39aa.5167, irq 5
7: Ext: GigabitEthernet0/6 : address is fc5b.39aa.516c, irq 10
8: Ext: GigabitEthernet0/7 : address is fc5b.39aa.5168, irq 10
9: Int: Internal-Data0/1 : address is 0000.0001.0002, irq 0
10: Int: Internal-Control0/0 : address is 0000.0001.0001, irq 0
11: Int: Internal-Data0/2 : address is 0000.0001.0003, irq 0
12: Ext: Management0/0 : address is fc5b.39aa.5164, irq 0
Licensed features for this platform:
Maximum Physical Interfaces : Unlimited perpetual
Maximum VLANs : 200 perpetual
Inside Hosts : Unlimited perpetual
Failover : Active/Active perpetual
Encryption-DES : Enabled perpetual
Encryption-3DES-AES : Enabled perpetual
Security Contexts : 2 perpetual
GTP/GPRS : Disabled perpetual
AnyConnect Premium Peers : 2 perpetual
AnyConnect Essentials : Disabled perpetual
Other VPN Peers : 750 perpetual
Total VPN Peers : 750 perpetual
Shared License : Disabled perpetual
AnyConnect for Mobile : Disabled perpetual
AnyConnect for Cisco VPN Phone : Disabled perpetual
Advanced Endpoint Assessment : Disabled perpetual
Total UC Proxy Sessions : 2 perpetual
Botnet Traffic Filter : Disabled perpetual
IPS Module : Disabled perpetual
Cluster : Enabled perpetual
Cluster Members : 2 perpetual
This platform has an ASA5525 VPN Premium license.
Serial Number: FCH1834JABC
Running Permanent Activation Key: 0x363bee4d 0xcc858b80 0xe5d21db4 0xf1d49123 0xcb04c456
Configuration register is 0x1
Image type : Release
Key version : A
Configuration has not been modified since last system restart.
ciscoasa# show inventory
Name: "Chassis", DESCR: "ASA 5525-X with SW, 8 GE Data, 1 GE Mgmt, AC"
PID: ASA5525 , VID: V03 , SN: FTX18401234
Name: "Storage Device 1", DESCR: "Model Number: Micron_M550_MTFDDAK128MAY"
PID: N/A , VID: N/A , SN: MXA1835ABCD
ciscoasa# show module
Mod Card Type Model Serial No.
---- -------------------------------------------- ------------------ -----------
0 ASA 5525-X with SW, 8 GE Data, 1 GE Mgmt, AC ASA5525 FCH1834JABC
ips Unknown N/A FCH1834JABC
cxsc Unknown N/A FCH1834JABC
sfr Unknown N/A FCH1834JABC
Mod MAC Address Range Hw Version Fw Version Sw Version
---- --------------------------------- ------------ ------------ ---------------
0 fc5b.39aa.5164 to fc5b.39aa.5123 1.0 2.1(9)8 9.4(3)12
ips fc5b.39aa.5162 to fc5b.39aa.5123 N/A N/A
cxsc fc5b.39aa.5162 to fc5b.39aa.5123 N/A N/A
sfr fc5b.39aa.5162 to fc5b.39aa.5123 N/A N/A
Mod SSM Application Name Status SSM Application Version
---- ------------------------------ ---------------- --------------------------
ips Unknown No Image Present Not Applicable
sfr Unknown No Image Present Not Applicable
Mod Status Data Plane Status Compatibility
---- ------------------ --------------------- -------------
0 Up Sys Not Applicable
ips Unresponsive Not Applicable
cxsc Unresponsive Not Applicable
sfr Unresponsive Not Applicable
Mod License Name License Status Time Remaining
---- -------------- --------------- ---------------
ips IPS Module Disabled perpetual
TFTP the FirePower image to the ASA flash.
ciscoasa# configure terminal
ciscoasa(config)# interface g0/1
ciscoasa(config-if)# ip add ress 192.168.1.1 255.255.255.0
ciscoasa(config-if)# no shut
ciscoasa(config-if)# show run interface f g0/1
!
interface GigabitEthernet0/1
nameif inside
security-level 100
ip address 192.168.1.1 255.255.255.0
ciscoasa(config-if)# ping 192.168.1.2
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.1.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms
ciscoasa(config-if)#
ciscoasa(config-if)# end
ciscoasa# copy tftp://192.168.1.2/asasfr-5500x-boot-6.0.0-1005.img disk0:/ ?
disk0: Copy to disk0: file system
disk1: Copy to disk1: file system
flash: Copy to flash: file system
running-config Update (merge with) current system configuration
startup-config Copy to startup configuration
system: Copy to system: file system
ciscoasa# copy tftp://192.168.1.2/asasfr-5500x-boot-6.0.0-1005.img disk 0:
Address or name of remote host [192.168.1.2]?
Source filename [asasfr-5500x-boot-6.0.0-1005.img]?
Destination filename [asasfr-5500x-boot-6.0.0-1005.img]?
Accessing tftp://192.168.1.2/asasfr-5500x-boot-6.0.0-1005.img...!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
<OUTPUT TRUNCATED>
!!!!!!!!!!!!!!!!!!!!!!!!!
41848832 bytes copied in 31.880 secs (1349962 bytes/sec)
ciscoasa# dir
Directory of disk0:/
11 drwx 4096 19:16:16 Sep 29 2014 log
22 drwx 4096 19:16:44 Sep 29 2014 crypto_archive
23 drwx 4096 19:16:52 Sep 29 2014 coredumpinfo
120 -rwx 37656576 19:25:02 Sep 29 2014 asa913-smp-k8.bin
121 -rwx 22658960 19:27:04 Sep 29 2014 asdm-714.bin
122 -rwx 73285632 00:38:08 Jun 06 2017 asa943-12-smp-k8.bin
123 -rwx 69828608 19:28:22 Sep 29 2014 asacx-5500x-boot-9.2.1.1-48.img
124 -rwx 25819140 00:42:58 Jun 06 2017 asdm-761.bin
125 -rwx 12998641 19:51:42 Sep 29 2014 csd_3.5.2008-k9.pkg
126 drwx 4096 19:51:44 Sep 29 2014 sdesktop
127 -rwx 6487517 19:51:44 Sep 29 2014 anyconnect-macosx-i386-2.5.2014-k9.pkg
128 -rwx 6689498 19:51:44 Sep 29 2014 anyconnect-linux-2.5.2014-k9.pkg
129 -rwx 4678691 19:51:44 Sep 29 2014 anyconnect-win-2.5.2014-k9.pkg
130 -rwx 100 22:45:26 Jun 05 2017 upgrade_startup_errors_201706052245.log
137 -rwx 41848832 18:55:08 Jun 08 2017 asasfr-5500x-boot-6.0.0-1005.img
8238202880 bytes total (4712689664 bytes free)
ciscoasa# delete disk0:/asacx-5500x-boot-9.2.1.1-48.img // REMOVE CX IMAGE IN FLASH
Delete filename [asacx-5500x-boot-9.2.1.1-48.img]?
Delete disk0:/asacx-5500x-boot-9.2.1.1-48.img? [confirm]
ciscoasa# dir
Directory of disk0:/
11 drwx 4096 19:16:16 Sep 29 2014 log
22 drwx 4096 19:16:44 Sep 29 2014 crypto_archive
23 drwx 4096 19:16:52 Sep 29 2014 coredumpinfo
120 -rwx 37656576 19:25:02 Sep 29 2014 asa913-smp-k8.bin
121 -rwx 22658960 19:27:04 Sep 29 2014 asdm-714.bin
122 -rwx 73285632 00:38:08 Jun 06 2017 asa943-12-smp-k8.bin
124 -rwx 25819140 00:42:58 Jun 06 2017 asdm-761.bin
125 -rwx 12998641 19:51:42 Sep 29 2014 csd_3.5.2008-k9.pkg
126 drwx 4096 19:51:44 Sep 29 2014 sdesktop
127 -rwx 6487517 19:51:44 Sep 29 2014 anyconnect-macosx-i386-2.5.2014-k9.pkg
128 -rwx 6689498 19:51:44 Sep 29 2014 anyconnect-linux-2.5.2014-k9.pkg
129 -rwx 4678691 19:51:44 Sep 29 2014 anyconnect-win-2.5.2014-k9.pkg
130 -rwx 100 22:45:26 Jun 05 2017 upgrade_startup_errors_201706052245.log
137 -rwx 41848832 18:55:08 Jun 08 2017 asasfr-5500x-boot-6.0.0-1005.img
8238202880 bytes total (4712689664 bytes free)
ciscoasa# sw-module ?
module Act on a module
ciscoasa# sw-module module ?
Available module ID(s):
cxsc Module ID
ips Module ID
sfr Module ID
ciscoasa# sw-module module sfr ?
recover Configure recovery of this module
reload Reload the module
reset Reset the module
shutdown Shut down the module
uninstall Uninstall the module
ciscoasa# sw-module module sfr recover ?
boot Initiate recovery of this module
configure Configure recovery parameters for this module
stop Stop recovery of this module
ciscoasa# sw-module module sfr recover configure ?
image Configure image file path on disk
ciscoasa# sw-module module sfr recover configure image ?
disk0: Image File Path
disk1: Image File Path
flash: Image File Path
ciscoasa# sw-module module sfr recover configure image disk0:/asasfr-5500x-boot-6.0.0-1005.img
ERROR: Another service (cxsc) is running, only one service is allowed to run at any time // CX MODULE WAS USED PREVIOUSLY
ciscoasa# sw-module module cxsc ?
password-reset Reset the CLI password on the module
recover Configure recovery of this module
reload Reload the module
reset Reset the module
shutdown Shut down the module
uninstall Uninstall the module
ciscoasa# sw-module module cxsc shutdown
Shutdown module cxsc? [confirm]
Shutdown issued for module cxsc.
ciscoasa# sw-module module cxsc uninstall
Module cxsc will be uninstalled. This will completely remove the disk image assocated with the sw-module including any configuration that existed within it.
Uninstall module cxsc? [confirm]
Uninstall issued for module cxsc.
ciscoasa#
ciscoasa# reload
System config has been modified. Save? [Y]es/[N]o: y
Cryptochecksum: c2929293 66ae9c7b 3523edd9 e85ff237
2866 bytes copied in 0.680 secs
Proceed with reload? [confirm]
ciscoasa# // ASA DIDN'T REBOOT
ciscoasa# reload ?
at Reload at a specific time/date
cancel Cancel a scheduled reload
in Reload after a time interval
max-hold-time Maximum hold time for orderly reload
noconfirm Reload without asking for confirmation
quick Quick reload without properly shutting down each subsystem
reason Reason for reload
save-config Save configuration before reload
<cr>
ciscoasa# reload noconfirm ?
at Reload at a specific time/date
in Reload after a time interval
max-hold-time Maximum hold time for orderly reload
quick Quick reload without properly shutting down each subsystem
reason Reason for reload
save-config Save configuration before reload
<cr>
ciscoasa# reload noconfirm quick ?
at Reload at a specific time/date
in Reload after a time interval
max-hold-time Maximum hold time for orderly reload
reason Reason for reload
save-config Save configuration before reload
<cr>
ciscoasa# reload noconfirm quick
***
*** --- SHUTDOWN NOW ---
Process shutdown finished
Rebooting.....
<OUTPUT TRUNCATED>
ciscoasa# sw-module module sfr recover configure image disk0:/asasfr-5500x-boot-6.0.0-1005.img
ciscoasa# debug module-boot ?
<1-255> Specify an optional debug level (default is 1)
<cr>
ciscoasa# debug module-boot // ISSUE THIS DEBUG TO MONITOR SFR UPGRADE
debug module-boot enabled at level 1
ciscoasa# sw-module module sfr recover boot
Module sfr will be recovered. This may erase all configuration and all data
on that device and attempt to download/install a new image for it. This may take
several minutes.
Recover module sfr? [confirm] // HIT ENTER
Recover issued for module sfr.
ciscoasa# Mod-sfr 0> ***
Mod-sfr 1> *** EVENT: Creating the Disk Image...
Mod-sfr 2> *** TIME: 19:14:00 UTC Jun 8 2017
Mod-sfr 3> ***
Mod-sfr 4> ***
Mod-sfr 5> *** EVENT: The module is being recovered.
Mod-sfr 6> *** TIME: 19:14:00 UTC Jun 8 2017
Mod-sfr 7> ***
Mod-sfr 8> ***
Mod-sfr 9> *** EVENT: Disk Image created successfully.
Mod-sfr 10> *** TIME: 19:16:45 UTC Jun 8 2017
Mod-sfr 11> ***
Mod-sfr 12> ***
Mod-sfr 13> *** EVENT: Start Parameters: Image: /mnt/disk0/vm/vm_3.img, ISO: -cdrom /mnt/disk0/
Mod-sfr 14> asasfr-5500x-boot-6.0.0-1005.img, Num CPUs: 3, RAM: 3614MB, Mgmt MAC: FC:5B:39:AA:5
Mod-sfr 15> 1:62, CP MAC: 00:00:00:04:00:01, HDD: -drive file=/dev/md0,cache=none,if=virtio, De
Mod-sfr 16> ***
Mod-sfr 17> *** EVENT: Start Parameters Continued: RegEx Shared Mem: 32MB, Cmd Op: r, Shared Me
Mod-sfr 18> m Key: 8061, Shared Mem Size: 64, Log Pipe: /dev/ttyS0_vm3, Sock: /dev/ttyS1_vm3, M
Mod-sfr 19> em-Path: -mem-path /hugepages
Mod-sfr 20> *** TIME: 19:16:46 UTC Jun 8 2017
Mod-sfr 21> ***
Mod-sfr 22> Status: Mapping host 0x2aab8d200000 to VM with size 67108864
Mod-sfr 23> Warning: vlan 0 is not connected to host network
Mod-sfr 24> ISOLINUX 3.73 2009-01-25 Copyright (C) 1994-2008 H. Peter Anvin
Mod-sfr 25> Cisco SFR-BOOT-IMAGE and CX-BOOT-IMAGE for SFR - 6.0.0
Mod-sfr 26> (WARNING: ALL DATA ON DISK 1 WILL BE LOST)
Mod-sfr 27> Loading bzImage..........................................................
Mod-sfr 28> Loading initramfs.gz...............................................................
Mod-sfr 29> ...................................................................................
Mod-sfr 30> ...................................................................................
Mod-sfr 31> ...................................................................................
Mod-sfr 32> ...................................................................................
Mod-sfr 33> ...................................................................................
Mod-sfr 34> ...................................................................................
Mod-sfr 35> ...................ready.
Mod-sfr 36> [ 0.000000] BIOS EBDA/lowmem at: 0009fc00/0009fc00
Mod-sfr 37> [ 0.000000] Initializing cgroup subsys cpuset
Mod-sfr 38> [ 0.000000] Initializing cgroup subsys cpu
Mod-sfr 39> [ 0.000000] Linux version 2.6.28.10.x86-target-64 (build@cel64build6.esn.sourcef
Mod-sfr 40> ire.com) (gcc version 4.3.3 (MontaVista Linux Sourcery G++ 4.3-292) ) #1 SMP PREEMP
Mod-sfr 41> T Sun Nov 8 16:49:06 EST 2015
Mod-sfr 42> [ 0.000000] Command line: initrd=initramfs.gz console=ttyS0,9600 BOOT_IMAGE=bzIm
Mod-sfr 43> age
Mod-sfr 44> [ 0.000000] KERNEL supported cpus:
Mod-sfr 45> [ 0.000000] Intel GenuineIntel
Mod-sfr 46> [ 0.000000] AMD AuthenticAMD
Mod-sfr 47> [ 0.000000] Centaur CentaurHauls
Mod-sfr 48> [ 0.000000] PAT WC disabled due to known CPU erratum.
Mod-sfr 49> [ 0.000000] BIOS-provided physical RAM map:
Mod-sfr 50> [ 0.000000] BIOS-e820: 0000000000000000 - 000000000009fc00 (usable)
Mod-sfr 51> [ 0.000000] BIOS-e820: 000000000009fc00 - 00000000000a0000 (reserved)
Mod-sfr 52> [ 0.000000] BIOS-e820: 00000000000f0000 - 0000000000100000 (reserved)
Mod-sfr 53> [ 0.000000] BIOS-e820: 0000000000100000 - 00000000dfffe000 (usable)
Mod-sfr 54> [ 0.000000] BIOS-e820: 00000000dfffe000 - 00000000e0000000 (reserved)
Mod-sfr 55> [ 0.000000] BIOS-e820: 00000000feffc000 - 00000000ff000000 (reserved)
Mod-sfr 56> [ 0.000000] BIOS-e820: 00000000fffc0000 - 0000000100000000 (reserved)
Mod-sfr 57> [ 0.000000] BIOS-e820: 0000000100000000 - 0000000101e00000 (usable)
Mod-sfr 58> [ 0.000000] DMI 2.4 present.
Mod-sfr 59> [ 0.000000] last_pfn = 0x101e00 max_arch_pfn = 0x3ffffffff
Mod-sfr 60> [ 0.000000] last_pfn = 0xdfffe max_arch_pfn = 0x3ffffffff
Mod-sfr 61> [ 0.000000] init_memory_mapping: 0000000000000000-00000000dfffe000
Mod-sfr 62> [ 0.000000] last_map_addr: dfffe000 end: dfffe000
Mod-sfr 63> [ 0.000000] init_memory_mapping: 0000000100000000-0000000101e00000
Mod-sfr 64> [ 0.000000] last_map_addr: 101e00000 end: 101e00000
Mod-sfr 65> [ 0.000000] RAMDISK: 7dbe1000 - 7ffff5d8
Mod-sfr 66> [ 0.000000] ACPI: RSDP 000FD8D0, 0014 (r0 BOCHS )
Mod-sfr 67> [ 0.000000] ACPI: RSDT DFFFE3E0, 0034 (r1 BOCHS BXPCRSDT 1 BXPC 1
Mod-sfr 68> [ 0.000000] ACPI: FACP DFFFFF80, 0074 (r1 BOCHS BXPCFACP 1 BXPC 1
Mod-sfr 69> [ 0.000000] ACPI: DSDT DFFFE420, 11A9 (r1 BXPC BXDSDT 1 INTL 20100528
Mod-sfr 70> [ 0.000000] ACPI: FACS DFFFFF40, 0040
Mod-sfr 71> [ 0.000000] ACPI: SSDT DFFFF740, 07F7 (r1 BOCHS BXPCSSDT 1 BXPC 1
Mod-sfr 72> [ 0.000000] ACPI: APIC DFFFF610, 0088 (r1 BOCHS BXPCAPIC 1 BXPC 1
Mod-sfr 73> [ 0.000000] ACPI: HPET DFFFF5D0, 0038 (r1 BOCHS BXPCHPET 1 BXPC 1
Mod-sfr 74> [ 0.000000] No NUMA configuration found
Mod-sfr 75> [ 0.000000] Faking a node at 0000000000000000-0000000101e00000
Mod-sfr 76> [ 0.000000] Bootmem setup node 0 0000000000000000-0000000101e00000
Mod-sfr 77> [ 0.000000] NODE_DATA [0000000000001000 - 0000000000005fff]
Mod-sfr 78> [ 0.000000] bootmap [000000000000d000 - 000000000002d3bf] pages 21
Mod-sfr 79> [ 0.000000] (7 early reservations) ==> bootmem [0000000000 - 0101e00000]
Mod-sfr 80> [ 0.000000] #0 [0000000000 - 0000001000] BIOS data page ==> [0000000000 - 00
Mod-sfr 81> 00001000]
Mod-sfr 82> [ 0.000000] #1 [0000006000 - 0000008000] TRAMPOLINE ==> [0000006000 - 00
Mod-sfr 83> 00008000]
Mod-sfr 84> [ 0.000000] #2 [0000200000 - 0000ae86dc] TEXT DATA BSS ==> [0000200000 - 00
Mod-sfr 85> 00ae86dc]
Mod-sfr 86> [ 0.000000] #3 [007dbe1000 - 007ffff5d8] RAMDISK ==> [007dbe1000 - 00
Mod-sfr 87> 7ffff5d8]
Mod-sfr 88> [ 0.000000] #4 [000009fc00 - 0000100000] BIOS reserved ==> [000009fc00 - 00
Mod-sfr 89> 00100000]
Mod-sfr 90> [ 0.000000] #5 [0000008000 - 000000c000] PGTABLE ==> [0000008000 - 00
Mod-sfr 91> 0000c000]
Mod-sfr 92> [ 0.000000] #6 [000000c000 - 000000d000] PGTABLE ==> [000000c000 - 00
Mod-sfr 93> 0000d000]
Mod-sfr 94> [ 0.000000] found SMP MP-table at [ffff8800000fdab0] 000fdab0
Mod-sfr 95> [ 0.000000] Zone PFN ranges:
Mod-sfr 96> [ 0.000000] DMA 0x00000000 -> 0x00001000
Mod-sfr 97> [ 0.000000] DMA32 0x00001000 -> 0x00100000
Mod-sfr 98> [ 0.000000] Normal 0x00100000 -> 0x00101e00
Mod-sfr 99> [ 0.000000] Movable zone start PFN for each node
Mod-sfr 100> [ 0.000000] early_node_map[3] active PFN ranges
Mod-sfr 101> [ 0.000000] 0: 0x00000000 -> 0x0000009f
Mod-sfr 102> [ 0.000000] 0: 0x00000100 -> 0x000dfffe
Mod-sfr 103> [ 0.000000] 0: 0x00100000 -> 0x00101e00
Mod-sfr 104> [ 0.000000] ACPI: PM-Timer IO Port: 0xb008
Mod-sfr 105> [ 0.000000] ACPI: LAPIC (acpi_id[0x00] lapic_id[0x00] enabled)
Mod-sfr 106> [ 0.000000] ACPI: LAPIC (acpi_id[0x01] lapic_id[0x01] enabled)
Mod-sfr 107> [ 0.000000] ACPI: LAPIC (acpi_id[0x02] lapic_id[0x02] enabled)
Mod-sfr 108> [ 0.000000] ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1])
Mod-sfr 109> [ 0.000000] ACPI: IOAPIC (id[0x00] address[0xfec00000] gsi_base[0])
Mod-sfr 110> [ 0.000000] IOAPIC[0]: apic_id 0, version 0, address 0xfec00000, GSI 0-23
Mod-sfr 111> [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl)
Mod-sfr 112> [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level)
Mod-sfr 113> [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level)
Mod-sfr 114> [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level)
Mod-sfr 115> [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level)
Mod-sfr 116> [ 0.000000] ACPI: HPET id: 0x8086a201 base: 0xfed00000
Mod-sfr 117> [ 0.000000] Using ACPI (MADT) for SMP configuration information
Mod-sfr 118> [ 0.000000] SMP: Allowing 3 CPUs, 0 hotplug CPUs
Mod-sfr 119> [ 0.000000] Allocating PCI resources starting at e2000000 (gap: e0000000:1effc0
Mod-sfr 120> 00)
Mod-sfr 121> [ 0.000000] PERCPU: Allocating 53248 bytes of per cpu data
Mod-sfr 122> [ 0.000000] Built 1 zonelists in Node order, mobility grouping on. Total pages
Mod-sfr 123> : 908258
Mod-sfr 124> [ 0.000000] Policy zone: Normal
Mod-sfr 125> [ 0.000000] Kernel command line: initrd=initramfs.gz console=ttyS0,9600 BOOT_IM
Mod-sfr 126> AGE=bzImage
Mod-sfr 127> [ 0.000000] Initializing CPU#0
Mod-sfr 128> [ 0.000000] PID hash table entries: 4096 (order: 12, 32768 bytes)
Mod-sfr 129> [ 0.000000] Fast TSC calibration using PIT
Mod-sfr 130> [ 0.000000] Detected 2394.091 MHz processor.
Mod-sfr 131> [ 0.000999] Console: colour VGA+ 80x25
Mod-sfr 132> [ 0.000999] console [ttyS0] enabled
Mod-sfr 133> [ 0.000999] allocated 38010880 bytes of page_cgroup
Mod-sfr 134> [ 0.000999] please try cgroup_disable=memory option if you don't want
Mod-sfr 135> [ 0.000999] Checking aperture...
Mod-sfr 136> [ 0.000999] No AGP bridge found
Mod-sfr 137> [ 0.000999] PCI-DMA: Using software bounce buffering for IO (SWIOTLB)
Mod-sfr 138> [ 0.000999] Placing software IO TLB between 0x20000000 - 0x24000000
Mod-sfr 139> [ 0.000999] Memory: 3497472k/4225024k available (4733k kernel code, 524684k abs
Mod-sfr 140> ent, 202868k reserved, 2572k data, 544k init)
Mod-sfr 141> [ 0.000999] HPET: 3 timers in total, 0 timers will be used for per-cpu timer
Mod-sfr 142> [ 0.001007] Calibrating delay loop (skipped), value calculated using timer freq
Mod-sfr 143> uency.. 4788.18 BogoMIPS (lpj=2394091)
Mod-sfr 144> [ 0.002322] Security Framework initialized
Mod-sfr 145> [ 0.003559] Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes)
Mod-sfr 146> [ 0.006005] Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes)
Mod-sfr 147> [ 0.007103] Mount-cache hash table entries: 256
Mod-sfr 148> [ 0.007911] Initializing cgroup subsys ns
Mod-sfr 149> [ 0.008003] Initializing cgroup subsys cpuacct
Mod-sfr 150> [ 0.008455] Initializing cgroup subsys memory
Mod-sfr 151> [ 0.009038] CPU: L1 I cache: 32K, L1 D cache: 32K
Mod-sfr 152> [ 0.009555] CPU: L2 cache: 4096K
Mod-sfr 153> [ 0.010006] CPU 0/0x0 -> Node 0
Mod-sfr 154> [ 0.010356] ACPI: Core revision 20080926
Mod-sfr 155> [ 0.011857] Setting APIC routing to flat
Mod-sfr 156> [ 0.013363] ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1
Mod-sfr 157> [ 0.024274] CPU0: Intel QEMU Virtual CPU version 1.5.0 stepping 03
Mod-sfr 158> [ 0.025996] Booting processor 1 APIC 0x1 ip 0x6000
Mod-sfr 159> [ 0.000999] Initializing CPU#1
Mod-sfr 160> [ 0.000999] Calibrating delay using timer specific routine.. 4787.92 BogoMIPS (
Mod-sfr 161> lpj=2393964)
Mod-sfr 162> [ 0.000999] CPU: L1 I cache: 32K, L1 D cache: 32K
Mod-sfr 163> [ 0.000999] CPU: L2 cache: 4096K
Mod-sfr 164> [ 0.000999] CPU 1/0x1 -> Node 0
Mod-sfr 165> [ 0.096063] CPU1: Intel QEMU Virtual CPU version 1.5.0 stepping 03
Mod-sfr 166> [ 0.099191] checking TSC synchronization [CPU#0 -> CPU#1]: passed.
Mod-sfr 167> [ 0.100053] Booting processor 2 APIC 0x2 ip 0x6000
Mod-sfr 168> [ 0.000999] Initializing CPU#2
Mod-sfr 169> [ 0.000999] Calibrating delay using timer specific routine.. 4787.88 BogoMIPS (
Mod-sfr 170> lpj=2393944)
Mod-sfr 171> [ 0.000999] CPU: L1 I cache: 32K, L1 D cache: 32K
Mod-sfr 172> [ 0.000999] CPU: L2 cache: 4096K
Mod-sfr 173> [ 0.000999] CPU 2/0x2 -> Node 0
Mod-sfr 174> [ 0.172134] CPU2: Intel QEMU Virtual CPU version 1.5.0 stepping 03
Mod-sfr 175> [ 0.175141] checking TSC synchronization [CPU#0 -> CPU#2]: passed.
Mod-sfr 176> [ 0.175987] Brought up 3 CPUs
Mod-sfr 177> [ 0.176333] Total of 3 processors activated (14363.99 BogoMIPS).
Mod-sfr 178> [ 0.177189] net_namespace: 1280 bytes
Mod-sfr 179> [ 0.178086] NET: Registered protocol family 16
Mod-sfr 180> [ 0.179001] ACPI: bus type pci registered
Mod-sfr 181> [ 0.180024] PCI: Using configuration type 1 for base access
Mod-sfr 182> [ 0.196360] ACPI: Interpreter enabled
Mod-sfr 183> [ 0.196778] ACPI: (supports S0 S5)
Mod-sfr 184> [ 0.197069] ACPI: Using IOAPIC for interrupt routing
Mod-sfr 185> [ 0.201261] ACPI: No dock devices found.
Mod-sfr 186> [ 0.201982] ACPI: PCI Root Bridge [PCI0] (0000:00)
Mod-sfr 187> [ 0.204305] pci 0000:00:01.3: quirk: region b000-b03f claimed by PIIX4 ACPI
Mod-sfr 188> [ 0.204978] pci 0000:00:01.3: quirk: region b100-b10f claimed by PIIX4 SMB
Mod-sfr 189> [ 0.227222] ACPI: PCI Interrupt Link [LNKA] (IRQs 5 *10 11)
Mod-sfr 190> [ 0.228260] ACPI: PCI Interrupt Link [LNKB] (IRQs 5 *10 11)
Mod-sfr 191> [ 0.229126] ACPI: PCI Interrupt Link [LNKC] (IRQs 5 10 *11)
Mod-sfr 192> [ 0.229920] ACPI: PCI Interrupt Link [LNKD] (IRQs 5 10 *11)
Mod-sfr 193> [ 0.230220] ACPI: PCI Interrupt Link [LNKS] (IRQs *9)
Mod-sfr 194> [ 0.232102] SCSI subsystem initialized
Mod-sfr 195> [ 0.233002] usbcore: registered new interface driver usbfs
Mod-sfr 196> [ 0.233992] usbcore: registered new interface driver hub
Mod-sfr 197> [ 0.234565] usbcore: registered new device driver usb
Mod-sfr 198> [ 0.234988] PCI: Using ACPI for IRQ routing
Mod-sfr 199> [ 0.243993] cfg80211: Using static regulatory domain info
Mod-sfr 200> [ 0.244568] cfg80211: Regulatory domain: US
Mod-sfr 201> [ 0.244964] (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp)
Mod-sfr 202> [ 0.245759] (2402000 KHz - 2472000 KHz @ 40000 KHz), (600 mBi, 2700 mBm)
Mod-sfr 203> [ 0.245964] (5170000 KHz - 5190000 KHz @ 40000 KHz), (600 mBi, 2300 mBm)
Mod-sfr 204> [ 0.246964] (5190000 KHz - 5210000 KHz @ 40000 KHz), (600 mBi, 2300 mBm)
Mod-sfr 205> [ 0.247963] (5210000 KHz - 5230000 KHz @ 40000 KHz), (600 mBi, 2300 mBm)
Mod-sfr 206> [ 0.248963] (5230000 KHz - 5330000 KHz @ 40000 KHz), (600 mBi, 2300 mBm)
Mod-sfr 207> [ 0.249712] (5735000 KHz - 5835000 KHz @ 40000 KHz), (600 mBi, 3000 mBm)
Mod-sfr 208> [ 0.249963] cfg80211: Calling CRDA for country: US
Mod-sfr 209> [ 0.250980] NetLabel: Initializing
Mod-sfr 210> [ 0.251349] NetLabel: domain hash size = 128
Mod-sfr 211> [ 0.251963] NetLabel: protocols = UNLABELED CIPSOv4
Mod-sfr 212> [ 0.252522] NetLabel: unlabeled traffic allowed by default
Mod-sfr 213> [ 0.253282] hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0
Mod-sfr 214> [ 0.254087] hpet0: 3 comparators, 64-bit 100.000000 MHz counter
Mod-sfr 215> [ 0.259966] pnp: PnP ACPI init
Mod-sfr 216> [ 0.260327] ACPI: bus type pnp registered
Mod-sfr 217> [ 0.262259] pnp: PnP ACPI: found 9 devices
Mod-sfr 218> [ 0.262722] ACPI: ACPI bus type pnp unregistered
Mod-sfr 219> [ 0.269188] bus: 00 index 0 io port: [0x00-0xffff]
Mod-sfr 220> [ 0.269728] bus: 00 index 1 mmio: [0x000000-0xffffffffffffffff]
Mod-sfr 221> [ 0.270473] NET: Registered protocol family 2
Mod-sfr 222> [ 0.281104] IP route cache hash table entries: 131072 (order: 8, 1048576 bytes)
Mod-sfr 223> [ 0.283331] TCP established hash table entries: 524288 (order: 11, 8388608 byte
Mod-sfr 224> s)
Mod-sfr 225> [ 0.287512] TCP bind hash table entries: 65536 (order: 8, 1048576 bytes)
Mod-sfr 226> [ 0.288597] TCP: Hash tables configured (established 524288 bind 65536)
Mod-sfr 227> [ 0.289346] TCP reno registered
Mod-sfr 228> [ 0.293058] NET: Registered protocol family 1
Mod-sfr 229> [ 0.293631] checking if image is initramfs...<7>Switched to high resolution mod
Mod-sfr 230> e on CPU 2
Mod-sfr 231> [ 1.431669] it is
Mod-sfr 232> [ 2.690158] Freeing initrd memory: 36985k freed
Mod-sfr 233> [ 2.699392] Microcode Update Driver: v2.00 <tigran@aivazian.fsnet.co.uk>, Peter
Mod-sfr 234> Oruba
Mod-sfr 235> [ 2.705522] HugeTLB registered 2 MB page size, pre-allocated 0 pages
Mod-sfr 236> [ 2.706641] VFS: Disk quotas dquot_6.5.1
Mod-sfr 237> [ 2.707121] Dquot-cache hash table entries: 512 (order 0, 4096 bytes)
Mod-sfr 238> [ 2.708565] msgmni has been set to 6903
Mod-sfr 239> [ 2.709759] alg: No test for stdrng (krng)
Mod-sfr 240> [ 2.710356] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 252
Mod-sfr 241> [ 2.711186] io scheduler noop registered
Mod-sfr 242> [ 2.711647] io scheduler anticipatory registered
Mod-sfr 243> [ 2.712165] io scheduler deadline registered
Mod-sfr 244> [ 2.712699] io scheduler cfq registered (default)
Mod-sfr 245> [ 2.713237] LTT : ltt-relay init
Mod-sfr 246> [ 2.713623] ltt-control init
Mod-sfr 247> [ 2.744365] LTT : ltt-kprobes init
Mod-sfr 248> [ 2.744770] pci 0000:00:00.0: Limiting direct PCI/PCI transfers
Mod-sfr 249> [ 2.745452] pci 0000:00:01.0: PIIX3: Enabling Passive Release
Mod-sfr 250> [ 2.746105] pci 0000:00:01.0: Activating ISA DMA hang workarounds
Mod-sfr 251> [ 2.747955] pci_hotplug: PCI Hot Plug PCI Core version: 0.5
Mod-sfr 252> [ 2.749332] processor ACPI_CPU:00: registered as cooling_device0
Mod-sfr 253> [ 2.750207] processor ACPI_CPU:01: registered as cooling_device1
Mod-sfr 254> [ 2.751089] processor ACPI_CPU:02: registered as cooling_device2
Mod-sfr 255> [ 2.758534] Non-volatile memory driver v1.2
Mod-sfr 256> [ 2.759013] Linux agpgart interface v0.103
Mod-sfr 257> [ 2.759666] [drm] Initialized drm 1.1.0 20060810
Mod-sfr 258> [ 2.760227] Serial: 8250/16550 driver4 ports, IRQ sharing enabled
Mod-sfr 259> ÿ[ 3.005451] serial8250: ttyS0 at I/O 0x3f8 (irq = 4) is a 16550A
Mod-sfr 260> [ 3.250469] serial8250: ttyS1 at I/O 0x2f8 (irq = 3) is a 16550A
Mod-sfr 261> [ 3.251915] 00:06: ttyS0 at I/O 0x3f8 (irq = 4) is a 16550A
Mod-sfr 262> [ 3.252926] 00:07: ttyS1 at I/O 0x2f8 (irq = 3) is a 16550A
Mod-sfr 263> [ 3.253885] Floppy drive(s): fd0 is 1.44M, fd1 is 1.44M
Mod-sfr 264> [ 3.265962] FDC 0 is a S82078B
Mod-sfr 265> [ 3.269857] brd: module loaded
Mod-sfr 266> [ 3.271570] loop: module loaded
Mod-sfr 267> [ 3.272017] Intel(R) Gigabit Ethernet Network Driver - version 1.2.45-k2
Mod-sfr 268> [ 3.272792] Copyright (c) 2008 Intel Corporation.
Mod-sfr 269> [ 3.273412] pcnet32.c:v1.35 21.Apr.2008 tsbogend@alpha.franken.de
Mod-sfr 270> [ 3.274169] e100: Intel(R) PRO/100 Network Driver, 3.5.23-k6-NAPI
Mod-sfr 271> [ 3.274869] e100: Copyright(c) 1999-2006 Intel Corporation
Mod-sfr 272> [ 3.275646] sky2 driver version 1.22
Mod-sfr 273> [ 3.276449] console [netcon0] enabled
Mod-sfr 274> [ 3.276867] netconsole: network logging started
Mod-sfr 275> [ 3.277570] input: Macintosh mouse button emulation as /devices/virtual/input/i
Mod-sfr 276> nput0
Mod-sfr 277> [ 3.278888] Loading iSCSI transport class v2.0-870.
Mod-sfr 278> [ 3.280358] Driver 'sd' needs updating - please use bus_type methods
Mod-sfr 279> [ 3.281150] Driver 'sr' needs updating - please use bus_type methods
Mod-sfr 280> [ 3.283124] scsi0 : ata_piix
Mod-sfr 281> [ 3.283758] scsi1 : ata_piix
Mod-sfr 282> [ 3.284258] ata1: PATA max MWDMA2 cmd 0x1f0 ctl 0x3f6 bmdma 0xc0c0 irq 14
Mod-sfr 283> [ 3.285036] ata2: PATA max MWDMA2 cmd 0x170 ctl 0x376 bmdma 0xc0c8 irq 15
Mod-sfr 284> [ 3.436610] ata1.00: ATA-7: QEMU HARDDISK, 1.5.0, max UDMA/100
Mod-sfr 285> [ 3.437290] ata1.00: 6291456 sectors, multi 16: LBA48
Mod-sfr 286> [ 3.438308] ata1.00: configured for MWDMA2
Mod-sfr 287> [ 3.590609] ata2.00: ATAPI: QEMU DVD-ROM, 1.5.0, max UDMA/100
Mod-sfr 288> [ 3.591713] ata2.00: configured for MWDMA2
Mod-sfr 289> [ 3.592487] scsi 0:0:0:0: Direct-Access ATA QEMU HARDDISK 1.5. PQ:
Mod-sfr 290> 0 ANSI: 5
Mod-sfr 291> [ 3.593641] sd 0:0:0:0: [sda] 6291456 512-byte hardware sectors: (3.22 GB/3.00
Mod-sfr 292> GiB)
Mod-sfr 293> [ 3.594518] sd 0:0:0:0: [sda] Write Protect is off
Mod-sfr 294> [ 3.595091] sd 0:0:0:0: [sda] Write cache: enabled, read cache: enabled, doesn'
Mod-sfr 295> t support DPO or FUA
Mod-sfr 296> [ 3.596189] sd 0:0:0:0: [sda] 6291456 512-byte hardware sectors: (3.22 GB/3.00
Mod-sfr 297> GiB)
Mod-sfr 298> [ 3.597076] sd 0:0:0:0: [sda] Write Protect is off
Mod-sfr 299> [ 3.597651] sd 0:0:0:0: [sda] Write cache: enabled, read cache: enabled, doesn'
Mod-sfr 300> t support DPO or FUA
Mod-sfr 301> [ 3.598672] sda: unknown partition table
Mod-sfr 302> [ 3.599808] sd 0:0:0:0: [sda] Attached SCSI disk
Mod-sfr 303> [ 3.600485] sd 0:0:0:0: Attached scsi generic sg0 type 0
Mod-sfr 304> [ 3.601437] scsi 1:0:0:0: CD-ROM QEMU QEMU DVD-ROM 1.5. PQ:
Mod-sfr 305> 0 ANSI: 5
Mod-sfr 306> [ 3.602882] sr0: scsi3-mmc drive: 4x/4x cd/rw xa/form2 tray
Mod-sfr 307> [ 3.603521] Uniform CD-ROM driver Revision: 3.20
Mod-sfr 308> [ 3.604314] sr 1:0:0:0: Attached scsi generic sg1 type 5
Mod-sfr 309> [ 3.605189] Fusion MPT base driver 3.04.07
Mod-sfr 310> [ 3.605652] Copyright (c) 1999-2008 LSI Corporation
Mod-sfr 311> [ 3.606223] Fusion MPT SPI Host driver 3.04.07
Mod-sfr 312> [ 3.606809] Fusion MPT FC Host driver 3.04.07
Mod-sfr 313> [ 3.607417] Fusion MPT SAS Host driver 3.04.07
Mod-sfr 314> [ 3.608251] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
Mod-sfr 315> [ 3.609066] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
Mod-sfr 316> [ 3.609838] uhci_hcd: USB Universal Host Controller Interface driver
Mod-sfr 317> [ 3.610751] usbcore: registered new interface driver usblp
Mod-sfr 318> [ 3.611382] Initializing USB Mass Storage driver...
Mod-sfr 319> [ 3.612003] usbcore: registered new interface driver usb-storage
Mod-sfr 320> [ 3.612690] USB Mass Storage support registered.
Mod-sfr 321> [ 3.613299] usbcore: registered new interface driver libusual
Mod-sfr 322> [ 3.614099] PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,1
Mod-sfr 323> [ 3.615569] serio: i8042 KBD port at 0x60,0x64 irq 1
Mod-sfr 324> [ 3.616190] serio: i8042 AUX port at 0x60,0x64 irq 12
Mod-sfr 325> [ 3.620420] mice: PS/2 mouse device common for all mice
Mod-sfr 326> [ 3.623849] rtc_cmos 00:01: RTC can wake from S4
Mod-sfr 327> [ 3.624457] input: AT Translated Set 2 keyboard as /devices/platform/i8042/seri
Mod-sfr 328> o0/input/input1
Mod-sfr 329> [ 3.624493] rtc_cmos 00:01: rtc core: registered rtc_cmos as rtc0
Mod-sfr 330> [ 3.624620] rtc0: alarms up to one day, 114 bytes nvram, hpet irqs
Mod-sfr 331> [ 3.624673] i2c /dev entries driver
Mod-sfr 332> [ 3.624822] md: raid1 personality registered for level 1
Mod-sfr 333> [ 3.627997] device-mapper: ioctl: 4.14.0-ioctl (2008-04-23) initialised: dm-dev
Mod-sfr 334> el@redhat.com
Mod-sfr 335> [ 3.628956] cpuidle: using governor ladder
Mod-sfr 336> [ 3.629443] cpuidle: using governor menu
Mod-sfr 337> [ 3.629895] No iBFT detected.
Mod-sfr 338> [ 3.631462] usbcore: registered new interface driver hiddev
Mod-sfr 339> [ 3.632137] usbcore: registered new interface driver usbhid
Mod-sfr 340> [ 3.632816] usbhid: v2.6:USB HID core driver
Mod-sfr 341> [ 3.633493] ACPI: PCI Interrupt Link [LNKA] enabled at IRQ 10
Mod-sfr 342> [ 3.634151] virtio-pci 0000:00:05.0: PCI INT A -> Link[LNKA] -> GSI 10 (level,
Mod-sfr 343> high) -> IRQ 10
Mod-sfr 344> [ 3.635827] ACPI: PCI Interrupt Link [LNKB] enabled at IRQ 11
Mod-sfr 345> [ 3.636526] virtio-pci 0000:00:06.0: PCI INT A -> Link[LNKB] -> GSI 11 (level,
Mod-sfr 346> high) -> IRQ 11
Mod-sfr 347> [ 3.638209] ACPI: PCI Interrupt Link [LNKD] enabled at IRQ 11
Mod-sfr 348> [ 3.638880] virtio-pci 0000:00:08.0: PCI INT A -> Link[LNKD] -> GSI 11 (level,
Mod-sfr 349> high) -> IRQ 11
Mod-sfr 350> [ 3.640959] vda: vda1
Mod-sfr 351> [ 3.643004] Advanced Linux Sound Architecture Driver Version 1.0.18rc3.
Mod-sfr 352> [ 3.645040] ALSA device list:
Mod-sfr 353> [ 3.645432] No soundcards found.
Mod-sfr 354> [ 3.645893] Netfilter messages via NETLINK v0.30.
Mod-sfr 355> [ 3.646468] nf_conntrack version 0.5.0 (16384 buckets, 65536 max)
Mod-sfr 356> [ 3.647272] ctnetlink v0.93: registering with nfnetlink.
Mod-sfr 357> [ 3.648139] IPv4 over IPv4 tunneling driver
Mod-sfr 358> [ 3.649176] ip_tables: (C) 2000-2006 Netfilter Core Team
Mod-sfr 359> [ 3.649853] TCP cubic registered
Mod-sfr 360> [ 3.650335] Initializing XFRM netlink socket
Mod-sfr 361> [ 3.650966] NET: Registered protocol family 10
Mod-sfr 362> [ 3.651925] lo: Disabled Privacy Extensions
Mod-sfr 363> [ 3.653057] tunl0: Disabled Privacy Extensions
Mod-sfr 364> [ 3.653913] ip6_tables: (C) 2000-2006 Netfilter Core Team
Mod-sfr 365> [ 3.654586] IPv6 over IPv4 tunneling driver
Mod-sfr 366> [ 3.655429] sit0: Disabled Privacy Extensions
Mod-sfr 367> [ 3.656210] NET: Registered protocol family 17
Mod-sfr 368> [ 3.657056] RPC: Registered udp transport module.
Mod-sfr 369> [ 3.657609] RPC: Registered tcp transport module.
Mod-sfr 370> [ 3.658405] registered taskstats version 1
Mod-sfr 371> [ 3.851301] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/s
Mod-sfr 372> erio1/input/input2
Mod-sfr 373> [ 5.161037] Sending DHCP and RARP requests ...<7>eth1: no IPv6 routers present
Mod-sfr 374> [ 18.661352] ... timed out!
Mod-sfr 375> [ 80.598727] IP-Config: Reopening network devices...
Mod-sfr 376> [ 82.101038] Sending DHCP and RARP requests ...<7>eth0: no IPv6 routers present
ciscoasa# sw-module module sfr recover boot debug module-boot Mod-sfr 377> [ 96.707352] ... timed out!
Mod-sfr 378> [ 161.449733] IP-Config: Auto-configuration of network failed.
Mod-sfr 379> [ 161.450403] Freeing unused kernel memory: 544k freed
Mod-sfr 380> INIT: version 2.86 booting
Mod-sfr 381> Please wait: booting...
Mod-sfr 382> mount: sysfs already mounted or /sys busy
Mod-sfr 383> mount: according to mtab, sysfs is already mounted on /sys
Mod-sfr 384> Starting udev [ 161.504797] udevd version 124 started
Mod-sfr 385> [ 161.618022] udev: renamed network interface eth0 to cplane
Mod-sfr 386> [ 161.620822] udev: renamed network interface eth1 to eth0
Mod-sfr 387> [ 162.148045] end_request: I/O error, dev fd0, sector 0
Mod-sfr 388> [ 162.168044] end_request: I/O error, dev fd0, sector 0
Mod-sfr 389> and populating dev cache
Mod-sfr 390> Root filesystem already rw, not remounting
Mod-sfr 391> Configuring network interfaces... done.
Mod-sfr 392> net.ipv4.conf.default.rp_filter = 1
Mod-sfr 393> net.ipv4.conf.all.rp_filter = 1
Mod-sfr 394> Configuring kvm-ivshmem
Mod-sfr 395> Configuring busybox-syslog
Mod-sfr 396> System startup links for /etc/init.d/sysklogd already exist.
Mod-sfr 397> Configuring openssh-sshd
Mod-sfr 398> Adding system startup for /etc/init.d/sshd.
Mod-sfr 399> Configuring sudo
Mod-sfr 400> Configuring ntpdate
Mod-sfr 401> adding crontab
Mod-sfr 402> Configuring update-modules
Mod-sfr 403> INIT: Entering runlevel: 5
Mod-sfr 404> Starting OpenBSD Secure Shell server: sshd
Mod-sfr 405> generating ssh RSA key...
Mod-sfr 406> generating ssh DSA key...
Mod-sfr 407> done.
Mod-sfr 408> Starting Advanced Configuration and Power Interface daemon: acpid.
Mod-sfr 409> acpid: starting up with proc fs
Mod-sfr 410> acpid: opendir(/etc/acpi/events): No such file or directory
Mod-sfr 411> starting Busybox inetd: inetd... done.
Mod-sfr 412> Starting ntpd: done
Mod-sfr 413> Starting syslogd/klogd: done
Mod-sfr 414> Cisco FirePOWER Services Boot Image 6.0.0 // TOOK 5-10 MINS TO FINISH
ciscoasa# no debug module-boot // DISABLE DEBUG
debug module-boot disabled.
ciscoasa# debug module-boot // YOU CAN RETAIN THE DEBUG TO OBSERVE .pkg INSTALL
The FirePower (sfr) module will remain in Recover status. You'll need to console to the module, install the package file to complete the upgrade.
ciscoasa# show module sfr
Mod Card Type Model Serial No.
---- -------------------------------------------- ------------------ -----------
sfr Unknown N/A FCH2124J0P7
Mod MAC Address Range Hw Version Fw Version Sw Version
---- --------------------------------- ------------ ------------ ---------------
sfr 4001.7ab9.6dd2 to 4001.7ab9.6dd2 N/A N/A
Mod SSM Application Name Status SSM Application Version
---- ------------------------------ ---------------- --------------------------
Mod Status Data Plane Status Compatibility
---- ------------------ --------------------- -------------
sfr Recover Not Applicable
ciscoasa# session sfr console
Opening console session with module sfr.
Connected to module sfr. Escape character sequence is 'CTRL-^X'.
asasfr login: admin
Password: Admin123
Cisco FirePOWER Services Boot 6.0.0 (1005)
Type ? for list of commands
asasfr-boot>system ?
reload => Reload the system
install => Install the system software
shutdown => Shut down the system. Manual restart will be required
asasfr-boot>system install ftp://ftp:ftp123@192.168.1.2/asasfr-sys-6.0.0-1005.pkg
Verifying.
113
Upgrade aborted.
You'll need to configure the FirePower module IP address via the setup command in order to FTP (or HTTP) the package (.pkg) file. Connect a straight cable between the FTP PC (192.168.1.2/24) and ASA MGMT port. You just need to unshut (no shutdown) the MGMT interface and may leave the IP address blank. Just configure the FirePower module with basic IP address settings for FTP connectivity. Hit 'Enter' on other configuration since the final FirePower settings will be done after the package (.pkg) has been installed.
You can configure the IP address for the ASA MGMT interface and FirePower module (eth0) to be on the same subnet since the management function are independent of each other.
ciscoasa# show run interface Management0/0
!
interface Management0/0
management-only
shutdown
no nameif
no security-level
no ip address
ciscoasa# configure terminal
ciscoasa(config)# interface Management0/0
ciscoasa(config-if)# no shutdown
ciscoasa(config-if)# show run int Management0/0
!
interface Management0/0
management-only
no nameif
security-level 100
no ip address
ciscoasa(config-if)# session sfr console
Opening console session with module sfr.
Connected to module sfr. Escape character sequence is 'CTRL-^X'.
asasfr-boot>setup
Welcome to Cisco FirePOWER Services Setup
[hit Ctrl-C to abort]
Default values are inside []
Enter a hostname [asasfr]:
Do you want to configure IPv4 address on management interface?(y/n) [Y]:
Do you want to enable DHCP for IPv4 address assignment on management interface?(y/n) [N]:
Enter an IPv4 address [192.168.8.8]:192.168.1.1
Enter the netmask [255.255.255.0]:
Enter the gateway [192.168.8.1]:192.168.1.1
Do you want to configure static IPv6 address on management interface?(y/n) [N]:
Stateless autoconfiguration will be enabled for IPv6 addresses.
Enter the primary DNS server IP address [8.8.8.8]:
Do you want to configure Secondary DNS Server? (y/n) [n]:
Do you want to configure Local Domain Name? (y/n) [n]:
Do you want to configure Search domains? (y/n) [n]:
Do you want to enable the NTP service? [Y]:
Please review the final configuration:
Hostname: asasfr
Management Interface Configuration
IPv4 Configuration: static
IP Address: 192.168.1.1
Netmask: 255.255.255.0
Gateway: 192.168.1.1
IPv6 Configuration: Stateless autoconfiguration
DNS Configuration:
DNS Server:
8.8.8.8
NTP configuration: Disabled
CAUTION
You have selected IPv6 stateless autoconfiguration, which assigns a global address
based on network prefix and a device identifier. Although this address is unlikely
to change, if it does change, the system will stop functioning correctly.
We suggest you use static addressing instead.
Apply the changes?(y,n) [Y]:
Configuration saved successfully!
Applying...
Done.
Press ENTER to continue...
asasfr-boot> system install ftp://ftp:ftp123@192.168.1.2/asasfr-sys-6.0.0-1005.pkg
Verifying...
Downloading...
Extracting...
<OUTPUT TRUNCATED>
Package Detail
Description: Cisco ASA-SFR 6.0.0-1005 System Install
Requires reboot: Yes
Do you want to continue with upgrade? [y]:
Warning: Please do not interrupt the process or turn off the system.
Doing so might leave system in unusable state.
Upgrading...
Starting upgrade process ....
Populating new system image.
<OUTPUT TRUNCATED>
Reboot is required to complete the upgrade. Press 'Enter' to reboot the system. // HIT 'ENTER'
Broadcast message from root (ttyS1) (Thu Jun 8 23:08:50 2017):
The system is going down for reboot NOW!
Console session with module sfr terminated.
ciscoasa# show module
Mod Card Type Model Serial No.
---- -------------------------------------------- ------------------ -----------
0 ASA 5525-X with SW, 8 GE Data, 1 GE Mgmt, AC ASA5525 FCH1834J123
ips Unknown N/A FCH1834J123
cxsc Unknown N/A FCH1834J123
sfr Unknown N/A FCH1834J123
Mod MAC Address Range Hw Version Fw Version Sw Version
---- --------------------------------- ------------ ------------ ---------------
0 fc5b.39aa.5164 to fc5b.39aa.5abc 1.0 2.1(9)8 9.4(3)12
ips fc5b.39aa.5162 to fc5b.39aa.5abc N/A N/A
cxsc fc5b.39aa.5162 to fc5b.39aa.5abc N/A N/A
sfr fc5b.39aa.5162 to fc5b.39aa.5abc N/A N/A
Mod SSM Application Name Status SSM Application Version
---- ------------------------------ ---------------- --------------------------
ips Unknown No Image Present Not Applicable
cxsc Unknown No Image Present Not Applicable
Mod Status Data Plane Status Compatibility
---- ------------------ --------------------- -------------
0 Up Sys Not Applicable
ips Unresponsive Not Applicable
cxsc Unresponsive Not Applicable
sfr Recover Not Applicable
Mod License Name License Status Time Remaining
---- -------------- --------------- ---------------
ips IPS Module Disabled perpetual
The FirePower package installation took around 15-20 mins for the FirePower upgrade to finish. You can observe the 'HD' LED light at the back of the chassis if it's already steady green. Use the show module command to verify the SFR status and should see it as UP.
ciscoasa# show module
Mod Card Type Model Serial No.
---- -------------------------------------------- ------------------ -----------
0 ASA 5525-X with SW, 8 GE Data, 1 GE Mgmt, AC ASA5525 FCH1834J123
ips Unknown N/A FCH1834J123
cxsc Unknown N/A FCH1834J123
sfr FirePOWER Services Software Module ASA5525 FCH1834J123
Mod MAC Address Range Hw Version Fw Version Sw Version
---- --------------------------------- ------------ ------------ ---------------
0 fc5b.39aa.5164 to fc5b.39aa.5abc 1.0 2.1(9)8 9.4(3)12
ips fc5b.39aa.5162 to fc5b.39aa.5abc N/A N/A
cxsc fc5b.39aa.5162 to fc5b.39aa.5abc N/A N/A
sfr fc5b.39aa.5162 to fc5b.39aa.5abc N/A N/A 6.0.0-1005
Mod SSM Application Name Status SSM Application Version
---- ------------------------------ ---------------- --------------------------
ips Unknown No Image Present Not Applicable
cxsc Unknown No Image Present Not Applicable
sfr ASA FirePOWER Up 6.0.0-1005
Mod Status Data Plane Status Compatibility
---- ------------------ --------------------- -------------
0 Up Sys Not Applicable
ips Unresponsive Not Applicable
cxsc Unresponsive Not Applicable
sfr Up Up
Mod License Name License Status Time Remaining
---- -------------- --------------- ---------------
ips IPS Module Disabled perpetual
ciscoasa# show module sfr
Mod Card Type Model Serial No.
---- -------------------------------------------- ------------------ -----------
sfr FirePOWER Services Software Module ASA5525 FCH1834J6E8
Mod MAC Address Range Hw Version Fw Version Sw Version
---- --------------------------------- ------------ ------------ ---------------
sfr fc5b.39aa.5162 to fc5b.39aa.5abc N/A N/A 6.0.0-1005
Mod SSM Application Name Status SSM Application Version
---- ------------------------------ ---------------- --------------------------
sfr ASA FirePOWER Up 6.0.0-1005
Mod Status Data Plane Status Compatibility
---- ------------------ --------------------- -------------
sfr Up Up
ciscoasa# show module sfr ?
details show detailed hardware module information
log show logs for this module
recover show recover configuration for this module
| Output modifiers
<cr>
ciscoasa# show module sfr details
Getting details from the Service Module, please wait...
Card Type: FirePOWER Services Software Module
Model: ASA5525
Hardware version: N/A
Serial Number: FCH1834J123
Firmware version: N/A
Software version: 6.0.0-1005
MAC Address Range: fc5b.39aa.5162 to fc5b.39aa.5abc
App. name: ASA FirePOWER
App. Status: Up
App. Status Desc: Normal Operation
App. version: 6.0.0-1005
Data Plane Status: Up
Console session: Ready
Status: Up
DC addr: No DC Configured
Mgmt IP addr: 192.168.45.45
Mgmt Network mask: 255.255.255.0
Mgmt Gateway: 0.0.0.0
Mgmt web ports: 443
Mgmt TLS enabled: true
The package (.pkg) file is not visible in the show flash or dir output but it would be permanent even if you reboot the ASA. If you reboot the ASA the SFR module will show as INIT and then becomes UP after a couple of minutes.
ciscoasa# dir
Directory of disk0:/
11 drwx 4096 19:16:16 Sep 29 2014 log
22 drwx 4096 19:16:44 Sep 29 2014 crypto_archive
23 drwx 4096 19:16:52 Sep 29 2014 coredumpinfo
123 -rwx 37656576 19:25:02 Sep 29 2014 asa913-smp-k8.bin
124 -rwx 22658960 19:27:04 Sep 29 2014 asdm-714.bin
125 -rwx 73285632 00:38:08 Jun 06 2017 asa943-12-smp-k8.bin
126 -rwx 25819140 00:42:58 Jun 06 2017 asdm-761.bin
127 -rwx 12998641 19:51:42 Sep 29 2014 csd_3.5.2008-k9.pkg
128 drwx 4096 19:51:44 Sep 29 2014 sdesktop
129 -rwx 6487517 19:51:44 Sep 29 2014 anyconnect-macosx-i386-2.5.2014-k9.pkg
130 -rwx 6689498 19:51:44 Sep 29 2014 anyconnect-linux-2.5.2014-k9.pkg
131 -rwx 4678691 19:51:44 Sep 29 2014 anyconnect-win-2.5.2014-k9.pkg
132 -rwx 100 22:45:26 Jun 05 2017 upgrade_startup_errors_201706052245.log
133 -rwx 41848832 18:55:08 Jun 08 2017 asasfr-5500x-boot-6.0.0-1005.img
8238202880 bytes total (4782514176 bytes free)
ciscoasa# show module
Mod Card Type Model Serial No.
---- -------------------------------------------- ------------------ -----------
0 ASA 5525-X with SW, 8 GE Data, 1 GE Mgmt, AC ASA5525 FCH1834J123
ips Unknown N/A FCH1834J123
cxsc Unknown N/A FCH1834J123
sfr Unknown N/A FCH1834J123
Mod MAC Address Range Hw Version Fw Version Sw Version
---- --------------------------------- ------------ ------------ ---------------
0 fc5b.39aa.5164 to fc5b.39aa.5abc 1.0 2.1(9)8 9.4(3)12
ips fc5b.39aa.5162 to fc5b.39aa.5abc N/A N/A
cxsc fc5b.39aa.5162 to fc5b.39aa.5abc N/A N/A
sfr fc5b.39aa.5162 to fc5b.39aa.5abc N/A N/A
Mod SSM Application Name Status SSM Application Version
---- ------------------------------ ---------------- --------------------------
ips Unknown No Image Present Not Applicable
cxsc Unknown No Image Present Not Applicable
Mod Status Data Plane Status Compatibility
---- ------------------ --------------------- -------------
0 Up Sys Not Applicable
ips Unresponsive Not Applicable
cxsc Unresponsive Not Applicable
sfr Init Not Applicable // SFR WILL SHOW AS UP AFTER FEW MINS
Mod License Name License Status Time Remaining
---- -------------- --------------- ---------------
ips IPS Module Disabled perpetual
ciscoasa# session sfr console
Opening console session with module sfr.
Connected to module sfr. Escape character sequence is 'CTRL-^X'.
Cisco ASA5525 v6.0.0 (build 1005)
firepower login: admin
Password: Admin123
Last login: Fri Jun 9 00:04:17 UTC 2017 on ttyS1
Copyright 2004-2015, Cisco and/or its affiliates. All rights reserved.
Cisco is a registered trademark of Cisco Systems, Inc.
All other trademarks are property of their respective owners.
Cisco Fire Linux OS v6.0.0 (build 258)
Cisco ASA5525 v6.0.0 (build 1005)
Last login: Thu Jun 8 23:21:29 UTC 2017
Last login: Fri Jun 9 00:04:17 UTC 2017 on ttyS1
You must accept the EULA to continue.
Press <ENTER> to display the EULA: // HIT 'ENTER'
END USER LICENSE AGREEMENT
IMPORTANT: PLEASE READ THIS END USER LICENSE AGREEMENT CAREFULLY. IT IS VERY IMPORTANT THAT YOU CHECK THAT YOU ARE PURCHASING CISCO SOFTWARE OR EQUIPMENT FROM AN APPROVED SOURCE AND THAT YOU, OR THE ENTITY YOU REPRESENT (COLLECTIVELY, THE "CUSTOMER") HAVE BEEN REGISTERED AS THE END USER FOR THE PURPOSES OF THIS CISCO END USER LICENSE AGREEMENT. IF YOU ARE NOT REGISTERED AS THE END USER YOU HAVE NO LICENSE TO USE THE SOFTWARE AND THE LIMITED WARRANTY IN THIS END USER LICENSE AGREEMENT DOES NOT APPLY. ASSUMING YOU HAVE PURCHASED FROM AN APPROVED SOURCE, DOWNLOADING, INSTALLING OR USING CISCO OR CISCO-SUPPLIED SOFTWARE CONSTITUTES ACCEPTANCE OF THIS AGREEMENT.
<OUTPUT TRUNCATED>
Product warranty terms and other information applicable to Cisco products are
available at the following URL: http://www.cisco.com/go/warranty.
Please enter 'YES' or press <ENTER> to AGREE to the EULA: // HIT 'ENTER'
System initialization in progress. Please stand by.
You must change the password for 'admin' to continue.
Enter new password: cisco123 // NOT A GOOD PASSWORD IN PRODUCTION NETWORK
Confirm new password: cisco123
You must configure the network to continue.
You must configure at least one of IPv4 or IPv6.
Do you want to configure IPv4? (y/n) [y]:
Do you want to configure IPv6? (y/n) [n]:
Configure IPv4 via DHCP or manually? (dhcp/manual) [manual]:
Enter an IPv4 address for the management interface [192.168.45.45]: 172.27.25.253
Enter an IPv4 netmask for the management interface [255.255.255.0]:
Enter the IPv4 default gateway for the management interface []: 172.27.25.1
Enter a fully qualified hostname for this system [firepower]: lab-firepower
Enter a comma-separated list of DNS servers or 'none' []: 8.8.8.8
Enter a comma-separated list of search domains or 'none' [example.net]: none
If your networking information has changed, you will need to reconnect.
For HTTP Proxy configuration, run 'configure network http-proxy'
Creating default Identity Policy.
Creating default SSL Policy.
Update policy deployment information
- add device configuration
- add network discovery
- add system policy
- add access control policy
- applying access control policy
You can register the sensor to a Firepower Management Center and use the
Firepower Management Center to manage it. Note that registering the sensor
to a Firepower Management Center disables on-sensor Firepower Services
management capabilities.
When registering the sensor to a Firepower Management Center, a unique
alphanumeric registration key is always required. In most cases, to register
a sensor to a Firepower Management Center, you must provide the hostname or
the IP address along with the registration key.
'configure manager add [hostname | ip address ] [registration key ]'
However, if the sensor and the Firepower Management Center are separated by a
NAT device, you must enter a unique NAT ID, along with the unique registration key.
'configure manager add DONTRESOLVE [registration key ] [ NAT ID ]'
Later, using the web interface on the Firepower Management Center, you must
use the same registration key and, if necessary, the same NAT ID when you add
this sensor to the Firepower Management Center.
>
configure Change to Configuration mode
end Return to the default mode
exit Exit this CLI session
expert Invoke a shell
help Display an overview of the CLI syntax
history Display the current session's command line history
logout Logout of the current CLI session
show Change to Show Mode
system Change to System Mode
> show
access-control-config Show Current Access-Control Configuration
audit-log Show audit log
cpu Show CPU utilization
database Change to Show Database Mode
device-settings Show device settings
disk Show disk usage
disk-manager Display current status of local disk(s)
dns Show DNS configuration
hostname Show hostname
hosts Show hosts
ifconfig Show currently configured interfaces
interfaces Show interface configuration
kdump Display status of kernel crash dump feature
log-events-to-ramdisk Display Logging of Events to hard disk
log-ips-connection Display Logging of Connection Events setting
managers Show managing Defense Centers
memory Show available memory
model Show model
netstat Show network connections
network Show configuration of management interface
network-static-routes Show static routes for management interfaces
ntp Show NTP configuration
perfstats Show perfstats
process-tree Show processes in tree format
processes Show processes
route Show configured routes
serial-number Show serial number
ssl-policy-config Show Current SSL Policy Configuration
summary Show summary
time Show time
traffic-statistics Show traffic statistics
user Show specified users
users Show all users
version Show versions
> show version
-----------------[ lab-firepower ]------------------
Model : ASA5525 (72) Version 6.0.0 (Build 1005)
UUID : 8a8a8310-4c9f-11e7-a92a-8909aa1a5123
Rules update version : 2015-10-01-001-vrt
VDB version : 252
----------------------------------------------------
> show summary
-----------------[ lab-firepower ]------------------
Model : ASA5525 (72) Version 6.0.0 (Build 1005)
UUID : 8a8a8310-4c9f-11e7-a92a-8909aa1a5123
Rules update version : 2015-10-01-001-vrt
VDB version : 252
----------------------------------------------------
Access control policy not yet applied.
> show ifconfig
cplane Link encap:Ethernet HWaddr 00:00:00:04:01:23
inet addr:127.0.4.1 Bcast:127.0.255.255 Mask:255.255.0.0
inet6 addr: fe80::200:ff:fe04:1/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:501 errors:0 dropped:0 overruns:0 frame:0
TX packets:92 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:31930 (31.1 Kb) TX bytes:8178 (7.9 Kb)
eth0 Link encap:Ethernet HWaddr FC:5B:39:AA:51:23
inet addr:172.27.25.253 Bcast:172.27.25.255 Mask:255.255.255.0
inet6 addr: fe80::fe5b:39ff:feaa:5162/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:204 errors:0 dropped:0 overruns:0 frame:0
TX packets:68 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:17518 (17.1 Kb) TX bytes:3288 (3.2 Kb)
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.255.255.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:874 errors:0 dropped:0 overruns:0 frame:0
TX packets:874 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:6119854 (5.8 Mb) TX bytes:6119854 (5.8 Mb)
tun1 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:169.254.0.1 P-t-P:169.254.0.1 Mask:255.255.0.0
inet6 addr: fdcc::bd:0:ffff:a9fe:1/64 Scope:Global
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:500
RX bytes:0 (0.0 b) TX bytes:0 (0.0 b)
> show interfaces
---------------------[ inside ]---------------------
Physical Interface : GigabitEthernet0/1
Type : ASA
Security Zone : None
Status : Enabled
Load Balancing Mode : N/A
---------------------[ cplane ]---------------------
IPv4 Address : 127.0.4.1
----------------------[ eth0 ]----------------------
Physical Interface : eth0
Type : Management
Status : Enabled
MDI/MDIX : Auto
MTU : 1500
MAC Address : FC:5B:39:AA:51:23
IPv4 Address : 172.27.25.253
----------------------[ tun1 ]----------------------
IPv6 Address : fdcc::bd:0:ffff:a9fe:1/64
---------------------[ tunl0 ]----------------------
----------------------------------------------------
> expert // GO TO LINUX SHELL
admin@lab-firepower:~$ sudo ping 172.2.8.3 // FIRESIGHT MANAGEMENT CENTER (FMC) IP
PING 172.2.8.3 (172.2.8.3) 56(84) bytes of data.
64 bytes from 172.2.8.3:icmp_req=1 ttl=56 time=347 ms
64 bytes from 172.2.8.3:icmp_req=1 ttl=56 time=347 ms
64 bytes from 172.2.8.3:icmp_req=1 ttl=56 time=347 ms
64 bytes from 172.2.8.3:icmp_req=1 ttl=56 time=347 ms
64 bytes from 172.2.8.3:icmp_req=1 ttl=56 time=347 ms
64 bytes from 172.2.8.3:icmp_req=1 ttl=56 time=347 ms
64 bytes from 172.2.8.3:icmp_req=1 ttl=56 time=347 ms
64 bytes from 172.2.8.3:icmp_req=1 ttl=56 time=347 ms
64 bytes from 172.2.8.3:icmp_req=1 ttl=56 time=347 ms
64 bytes from 172.2.8.3:icmp_req=1 ttl=56 time=347 ms
^C
--- 172.2.8.3 ping statistics ---
10 packets transmitted, 10 received, 0% packet loss, time 9006ms
rtt min/avg/max/mdev = 346.345/347.605/349.714/1.312 ms