ASA 5505 board repair and recovery

by, author:
Ron Staples
Version:
8.3
Price:
500.00

Reviewed by:
Rating:
5
On 8, June 2010
Last modified:7, May 2014

Summary:

I received a faulty ASA 5505 from a customer the other day. Customer has already been shipped a replacement and now I asked what should I do with this one, sitting on my desk. The problem with this device is that the power plug had become loose, periodically causing the ASA to reload and causing havoc on the customer’s network. It clearly had to be replaced

I received a faulty ASA 5505 from a customer the other day.  Customer has already been shipped a replacement and now I asked what should I do with this one, sitting on my desk. The problem with this device is that the power plug had become loose, periodically causing the ASA to reload and causing havoc on the customer’s network. It clearly had to be replaced

Normally I would send a refurbished non smart net covered Cisco item out for repair, if the cost was justified. ASA 5505 can be purchased from Bay for around 375 bucks used and 600 new; cost to repair this plus shipping would have been close to $200.  In this case it was better to simply replace it.    I decided to crack this box open and take a peek inside. I feel comfortable doing this because my previous career was an electronics bench tech.  I’m always looking to take things apart to see what makes them tick; besides I had nothing to loose with this one. Once apart I realize that here was not much to this device.  From the picture  you can see how the solder joints of the power receptacle became loose and broken around the power connector.

After correcting the solder joints I decided to put the ASA back together, in the picture to the left you will notice that there is a flash card on the front right  of the board and one DDR 256 sim across the back.   The mother board is held in by oney two screws, for the most part the ASA is very easy to take apart.

Most of the time solder joints become loose due to the device being powered up in a room with lots of other larger devices (ie 6509) and an inadequate cooling system will simply cause it to overheat and melt the joints; thus causing the power to go out, once this happens the solder cools off at whatever state it’s in.

Next time power is applied it may or may not power up and this causes power to be sporadic, one side may have a good condition while the other is barely touching.  Ether case it can be easily fixed.

I wanted to add a side note here, although Cisco did release a Field Notice (FN – 62832) that explained and addresses a known power-on issue with 5505’s after reading it I was not entirely convinced that this issue was related to this device. One tip I would like to give is to make sure you place your screws in separate piles, also keep in mind the longer screws that go underneath are for the recessed holes.

I made the mistake of putting the wrong screws in the wrong hole.

After everything was together, I connected my console cable from my laptop and pulled up Secure CRT ( I know most of you prefer the free programs such as puty and teleterm) I like Secure CRT, I’ve been using it a long time and consider it one of the best terminal programs. I plugged in the power cable and saw the power light lit (this is a good sign) then status and nothing…  hmm..  press enter a few times on my terminal and seen that the image was loading. ACTIVE IS LIT and I now have a prompt… ugh password?

As I mentioned at the beginning, this ASA came from a customer. and i had no clue what their login info was. Now I found myself staring at unknown host-name and no password information for the enable mode.  I suppose I could call and ask what the login and password was.. But where is the fun in that?  Besides I would have nothing to write about.

The first step in ASA password recovery is to power on and off the device.  Once you see the message “Use BREAK or ESC to interrupt the boot” DO IT, press ESC.  (see screen shot lower right) Afterwords you will be placed in ronmon mode.  As seen in the screen-shot.  From here you simply type confreg and press [ENTER]. This will display the Configuration Register and allow you to changes the configuration and disable system configuration. Keep close attention the bold print below and be sure to write your config register info down, you will need it later.

rommon #1> confreg
Current Configuration Register: 0x00l00000

Configuration Summary:
boot ROMMON
pass NVRAM fi1e specs in auto-bootloader mode
Do you wish to change this configuration? y/n [n]: y

enable boot to ROMMON prompt? y/n [n]:
enable TFTP netboot? y/n [n]’:o
enable F1ash boot? y/n [n]r:e
select specific F1ash image index? y/n (n]:
disab1e system configuration? y/n [n]: y

go to ROMMON prompt if netboot fails? y/n [nJ:
enable passing NVPAM file specs in auto-boot mode? y/n [n]:
disable display of BREAK or ESC key prompt during auto-boot? y/n [nJr:b **ADD250X250**
Current Configuration Register: 0x00000040
Configuration Summary:
boot ROMMON
ignore system configuration
Update Config Register (0x40) in NVRAM.’.’.i
Ready Señ&ocoM1 34. 1 34Rows. L4Cds VT100 NUM ,

Once you gather all information needs,  only thing left to do is “boot”

ronimon #3> boot
Launching BootLoader.’.’.?
Boot configuration fi1e contains 1 entry.
Loading disk0:/asaO02-k8.bin…

********

Copyright (c) 1996-2007 by Cisco systems, Inc
Use, dup1ication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercia1 Computer software – Restricted
Rights c1ause at FAR secs. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technica1 Data and Computer
Software clause at DFARS sec-. 252.227-7013.
Ignoring startup configuration as instructed by configuration r gister.
INFo: Converting to disk0:/
Type help or ‘?’ for a 1ist of avai1able commands.
ciscoasa>

If you plan on keeping your config file, pay close attention to the following commands because you can easily overwrite your config.

ciscoasa> en
Password:
ci scoasa#
ciscoasa# copy startup-config running-config
Destination fi1ename [running-config]?
INFOr: outside interface address added to PAT poo1
Cryptochecksum (unchanged):: e6615619 b3ab09l08 9d165653 98fb4f38
4073 bytes copied in 0.990 secs
HOU-Shop# config t
HOU-Shop(config)# password cisco
HOU-Shop(config)# enab1e password cisco123
HU–Shp(config)#? config-register 0x00000001
HOU-Shop (config)# hostname ciscoasa
ciscoasa(config)# copy running-config startup-config
Source filename [running-config]?
Cryptochecksum: c82cc8a7 a7a2c3f4 45734f95 dde5b4df
4128 bytes copied in 1.720 secs (4128 bytes/sec)
ciscoasa(config)#

The steps here very simple and explained in greater detail below.

1)    copy startup-config running-config  (restore the config)

2)    config t (enter config mode)

  • password cisco ( change user password)
  • enab1e password cisco123 (change enabled password)
  • config-register 0x00000001 (change the config register back)
  • hostname ciscoasa (enter hostname (default used))
  • copy running-config startup-config (now save your changes)
  • end (back to prompt)

3)    boot

Keep in mind that the config resister number was retrieved when we first ran confreg at the rommon prompt.  Once the ASA comes online you can login with the your passwords and perform show version.  If you did not erase your config you can display it and save it at this time.  For now,  I’ll be clearing this one and starting anew.


2010-06-08
rstaples@configbytes.com

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

As I mentioned at the beginning, this ASA came from a customer.  Now I was staring at unknown hostname and no password information for the enable mode.  I suppose I could call and ask what the login and password was.. But where is the fun in that?  Besides I would have nothing to write about.

The first step in ASA password recovery is to power on and off the device.  Once you see themessage “Use BREAK or ESC to

I received a faulty ASA 5505 from a customer the other day. Customer has already been shipped a replacement and now I asked what should I do with this one, sitting on my desk. The problem with this device is that the power plug had become loose, periodically causing the ASA to reload and causing havoc on the customer’s network. It clearly had to be replaced

51 thoughts on “ASA 5505 board repair and recovery

  1. Thank you so much! We had this same problem, and while I suspected your fix was the correct approach, your article confirmed it!

  2. Great article!

    What kind of solder did you use? I’ve never had to do any soldering, but I’ve got this exact issue with an ASA and I’m going to attempt a repair.

  3. I used standard electronic solder that you can find in Radio Shack. I should WARN you, if you NEVER solder electronic parts before you should read up or watch some videos on YouTube. You can easily fry you circuit board if you leave the iron on the connector to long.

    Lastly practice on something first before you make the repair.

    Hope this helps.

  4. ASA 5505 dead

    I had a dead short (8 ohms) across c-278. It killed Q-26 (power in mosfet). Started pulling parts to find short. Removed u-13 and short went away, replaced u-13 and Q-26. Got my 48 volts back across C-278, unit booted normal and still in service.

    • Do you recall the site that described Q-10? I have Q-12 that is fried. Looking for transistor ID or schematics.

  5. Hi Ron,

    Could you help me fix my ASA 5505? It has the same issue like yours. Please let me know if you can or not?

    Regards,
    Samuel.

  6. I would like to repair my ASA 5505 but do not know the values ​​of the following components L12, L54, C286. Does anyone know the values ​​of these pinout

    thank you very much

    • WOW what fried thoes componets? That does not look good at all. I dont think heat did that, that looks like they were shorted.

      When I return to the office this week end, I’ll open up my ASA and see if I get thoes values for you. It may take a few days to a week for me to get back to you.

  7. @ Keith, you appear to have a short somewhere. If the lights are on always than there is contact made some place on your board. I would pull the board the out and examine it under a lighted magnifying glass.

    Also does it work with the all the lights on?
    Can you still console into it?

  8. @Alessandro I haven’t heard from you in a long time. I thought your issue was resolved. The image you have posted on image shack is no longer working. Repost the image.

  9. Thanks for the tip, I will pull the board and examine it more closely. As far as consoling to the device, no there is no display when hooked up and powered on. Might be a bit of s stretch to find the short, but I am willing to look for it. Thanks for the tip!

  10. Hi there
    I have an asa5510 and has status light and active light amber solid all the time, and no console output at all. Any suggestions please ?

    • Assuming that the device is recently acquired and not in production.

      My first check would be the console cable and your terminal settings. Are you getting some garbled text on the console? If this is the case than I recheck your terminal settings, be sure this you are at 9600 8n1

      I’ve had issues where another engineer before me set the speed higher than what Cisco recommends and when i connected at 9600, I would received the trashed text.

      If the device was in production and this just started than you may have something entirely different.
      Things to try
      Can you telnet or SSH into the device?
      If not than use a paper clip and press and hold the reset button in for at least 60 seconds, (not sure where this is located on the 5510 or if it has one but the 5505 has one in the back) this should reset the device. WARNING this will wipe out your settings/config and return the box to factory default.

      Let me know if any of this was helpful. Good Luck!

  11. Hi Ron
    Wow, great site
    I have two Problems 🙁 One 5505 with boot error code “i2c_write_byte_w_suspend() error, slot = 0x0, device = 0x40, address = 26 byte count = 1. Reason: I2C_UNPOPULATED_ERROR”
    Do you have a idea? Is there a Problem with U13?

    The second Problem, a 5505 without led, no post, no console, nothing. Because the customer broke the plastic 48v dc connector, and connect it at the wrong way 🙁
    Do you have a idea?
    Now i have two 5505, but i am not happy with it now.
    Is there a “easy” way to repair one 5505 with the other?

    Regards
    Sascha

    • Hello Sascha,

      Sorry for the late reply. What I would do is take the one with the boot error message and remove the 48 volt DC connector. Than place that in the other ASA that has the crack connector.

      I think if you did that you would salvage one ASA. The one with boot error message, make sure none of the memory chips got loose, I’ve seen some strange things when that happens.

      Let me know how you make. Thanks for visiting.

  12. Hi

    I was wondering what the component c827 in the picture next to the input power is ?

    My broken ASA 5505 is missing one of the small soft brown “pillows” like the one called c773.

    How can i fix this ?

  13. I now have 3 ASA which have stop powering up…
    do you guys know anybody who can fix these… I did open the unit and see if the connector were lose (but does not looks like they are). plus don’t see any components buried or damaged.
    Thanks
    Kal

    • No, being that these run about 500 bucks new (depending on the license you get) not sure if they are worth fixing. The one I fix, I kept, the customer received a brand new replacement.

  14. Good Day,
    I was researching an issue with my ASA 5505 that sounds the same as the website I have provided in your website field. Can you tell me if it is easy to replace the POE controller IC chip LTC4259ACGW-1 ? I bought a replacement on Ebay today. I thought it worth the few bucks to see if I can salvage my device.

  15. I Have trouble with my asa 5505,
    Can anyone tell me what voltage there should be after T1 (E2004D-535A).

    Looks like my T1 is broken.

  16. Hi, i have an ASA 5505 someday it make a strange noise and after that it never works.. i think it has a transistor burned… after the power connector the piece Q26 is a transistor just i committed a mistake i carried the asa with an electronic and i don’t know if he changed the transistor i just see that i made a bad work with it…. Could you tell me what is the correct transistor?? Actually the ASA has a D25NF10L so and i doesnt work… just maike a noise like a little shortcircuit… Please help me…

Leave a Reply to Mark Vice Cancel reply

Your email address will not be published. Required fields are marked *

*