Guest

Cisco ASA 5500-X Series Next-Generation Firewalls

Upgrade to ASA 8.3 and ASDM 6.3

  • Viewing Options

  • EPUB (56.1 KB)
  • MOBI (69.9 KB)
  • PDF (143.7 KB)
  • Feedback

Table of Contents

Upgrade to ASA 8.3 and ASDM 6.3

Upgrading the Software

Viewing Your Current Version

Upgrading the Operating System and ASDM Images

Upgrade Using the CLI

Upgrading Using ASDM 6.2 or Earlier

Upgrading Using ASDM 6.3 or Later

Upgrade to ASA 8.3 and ASDM 6.3

Released: August 21, 2014

Upgrading the Software


Note Before you upgrade, be sure to see the Cisco ASA 5500 Migration Guide for Version 8.3. The following major changes require configuration migration:

  • NAT redesign.
  • Real IP addresses in access rules instead of mapped addresses.
  • Named network objects and service objects.

The Cisco ASA 5500 Migration Guide for Version 8.3 also describes how to downgrade.


 

This section describes how to upgrade to the latest version, and includes the following topics:

Viewing Your Current Version

(CLI) Use the show version command to verify the software version of your ASA. (ASDM) The software version appears on the ASDM home page; view the home page to verify the software version of your ASA.

Upgrading the Operating System and ASDM Images

This section describes how to install the ASDM and operating system (OS) images.

We recommend that you upgrade the ASDM image before the OS image. ASDM is backward compatible, so you can upgrade the OS using the new ASDM; however you cannot use an old ASDM image with a new OS.


NoteIf the ASA is running version 8.0 or later, then you can upgrade to the latest version of ASDM (and disconnect and reconnect to start running it) before upgrading the OS.

If the ASA is running a version earlier than 8.0, then use the already installed version of ASDM to upgrade both the OS and ASDM to the latest versions, and then reload.


Upgrade Using the CLI

Detailed Steps

This procedure uses TFTP. For FTP or HTTP, see the copy command.


Step 1 If you have a Cisco.com login, you can obtain the OS and ASDM images from the following website:

http://www.cisco.com/cisco/software/navigator.html

Step 2 Back up your configuration file. To print the configuration to the terminal, enter the following command:

hostname# show running-config
 

Copy the output from this command, then paste the configuration in to a text file.


Note If you are upgrading from a pre-8.3 version, then the running configuration is backed up automatically.


For other methods of backing up, see the “Managing Software and Configurations” chapter in Cisco ASA 5500 Series Configuration Guide using the CLI .

Step 3 Install the new images using TFTP. Enter this command separately for the OS image and the ASDM image:

hostname# copy tftp://server[/path]/filename {disk0:/ | disk1:/}[path/]filename
 

For example:

hostname# copy tftp://10.1.1.1/asa830-4-k8.bin disk0:/asa831-k8.bin
...
hostname# copy tftp://10.1.1.1/asdm-63096.bin disk0:/asdm-631.bin
 

If your ASA does not have enough memory to hold two images, overwrite the old image with the new one by specifying the same destination filename as the existing image.

Step 4 To change the OS boot image to the new image name, enter the following commands:

hostname(config)# clear configure boot
hostname(config)# boot system {disk0:/ | disk1:/}[path/]new_filename
 

For example:

hostname(config)# clear configure boot
hostname(config)# boot system disk0:/asa831-k8.bin
 

Step 5 To configure the ASDM image to the new image name, enter the following command:

hostname(config)# asdm image {disk0:/ | disk1:/}[path/]new_filename
 

Step 6 To save the configuration and reload, enter the following commands:

hostname(config)# write memory
hostname(config)# reload
 


 

Upgrading Using ASDM 6.2 or Earlier

Detailed Steps


Step 1 From the Tools menu, choose Tools > Upgrade Software from Cisco.com .

In multiple context mode, access this menu from the System.

The Upgrade Software from Cisco.com Wizard appears.


NoteIf you are running ASDM Version 5.2 or lower, then the Upgrade Software from Cisco.com Wizard is not available. You can download the software from the following URL:

http://www.cisco.com/cisco/web/download/index.html

Then use Tools > Upgrade Software.


Step 2 Click Next .

The Authentication screen appears.

Step 3 Enter your Cisco.com username and password, and click Next .

The Image Selection screen appears.

Step 4 Check the Upgrade the ASA version check box and the Upgrade the ASDM version check box to specify the most current images to which you want to upgrade, and click Next .

The Selected Images screen appears.

Step 5 Verify that the image file you have selected is the correct one, and then click Next to start the upgrade.

The wizard indicates that the upgrade will take a few minutes. You can then view the status of the upgrade as it progresses.

The Results screen appears. This screen provides additional details, such as whether the upgrade failed or whether you want to save the configuration and reload the ASA.

If you upgraded the ASA version and the upgrade succeeded, an option to save the configuration and reload the ASA appears.

Step 6 Click Yes .

For the upgrade versions to take effect, you must save the configuration, reload the ASA, and restart ASDM.

Step 7 Click Finish to exit the wizard when the upgrade is finished.


 

Upgrading Using ASDM 6.3 or Later

Detailed Steps


Step 1 Choose Tools > Check for ASA/ASDM Updates .

In multiple context mode, access this menu from the System.

The Cisco.com Authentication dialog box appears.

Step 2 Enter your assigned Cisco.com username and the Cisco.com password, and then click Login .

The Cisco.com Upgrade Wizard appears.

Step 3 Complete the upgrade wizard.

Step 4 For the upgrade versions to take effect, check the Save configuration and reload device now check box to restart the ASA and restart ASDM.

Step 5 Click Finish to exit the wizard and save the configuration changes that you made.


 

Copyright © 2014 Cisco Systems, Inc. All rights reserved.