思科防火牆ASA5506X總是自動重啓查看crash日誌

 

 

 

查看啓動時間有沒有變化

show ver

結果

Cisco Adaptive Security Appliance Software Version 9.5(2) 
Device Manager Version 7.5(2)

Compiled on Sat 28-Nov-15 00:16 PST by builders
System image file is "disk0:/asa952-lfbff-k8.SPA"
Config file at boot was "startup-config"

ASA5506X up 34 mins 26 secs

注意ASA5506X up 34 mins 26 secs這一句，如果時間比較近，沒有斷電和reload命令重啓的情況下應該是自動重啓了

查看崩潰日誌

show crash

結果

: Saved_Crash

Thread Name: Unicorn Proxy Thread
Page fault: Address not mapped
        r8 0x0000000000000004
        r9 0x0000000000000040
       r10 0x0000000000000000
       r11 0x00007f1554d60150
       r12 0x0000000000000013
       r13 0x00007f1560cd1ac0
       r14 0x0000000000000001
       r15 0x00002aaac1bfafc0
       rdi 0x0000000000000013
       rsi 0x0000000000000013
       rbp 0x00002aaac6bdec10
       rbx 0x00002aaac1bfafc0
       rdx 0x00002aaac6bdec40
       rax 0x0000000000000013
       rcx 0x0000000000000013
       rsp 0x00002aaac6bdebe8
       rip 0x00007f1554c7599a
    eflags 0x0000000000013297
    csgsfs 0x0000000000000033
error code 0x0000000000000004
    vector 0x000000000000000e
  old mask 0xffffffde3e3a5a05
       cr2 0x0000000000000013
              
Cisco Adaptive Security Appliance Software Version 9.5(2)
              
Compiled on Sat 28-Nov-15 00:16 PST by builders
Hardware:   ASA5506
Crashinfo collected on 08:39:26.869 Beijing Fri Jun 19 2020
ASLR enabled, text region 7f15582fe000-7f155c537f1c

注意Crashinfo collected on 08:39:26.869 Beijing Fri Jun 19 2020 這個是ASA防火牆崩潰記錄的時間，如果能和故障對上，那麼肯定是防火牆崩潰導致的重啓

這個崩潰日誌可以TFTP導出，服務端推薦3CDaemon，導出命令如下

dir #查看目錄有沒有崩潰日誌文件
copy crash.txt tftp 
Source filename [crash.txt]? #確認源文件名
Address or name of remote host []? #輸入tftp服務器地址回車
Destination filename [crash.txt]? #回車或輸入自定義名稱回車
601616 bytes copied in 6.200 secs (100269 bytes/sec) #傳輸完成

針對在保設備，網上的解決方案是找TAC開case

目前懷疑溫度過高或者硬件問題。