Guest

Cisco ASA 5500-X Series Next-Generation Firewalls

Upgrade to ASA 8.4 and ASDM 6.4

  • Viewing Options

  • EPUB (57.1 KB)
  • MOBI (73.4 KB)
  • PDF (193.6 KB)
  • Feedback

Table of Contents

Upgrade to ASA 8.4 and ASDM 6.4

Upgrading the Software

Viewing Your Current Version

Upgrading the Operating System and ASDM Images

Upgrade Using the CLI

Upgrading Using ASDM 6.3 or Later

Upgrading Using ASDM 6.0 Through ASDM 6.2

Upgrading Using ASDM 5.2 or Earlier

Upgrade to ASA 8.4 and ASDM 6.4

Upgrading the Software


NoteYou can upgrade from any previous release (if available for your model) directly to the latest release. If you are upgrading from a pre-8.3 release to a post-8.3 release, see theCisco ASA 5500 Migration Guide to Version 8.3 and Later for important information about migrating your configuration to Version 8.3 or later.

Upgrading from some releases may have consequences for downgrading; be sure to back up your configuration file in case you want to downgrade.


This section describes how to upgrade to the latest version and includes the following topics:

Viewing Your Current Version

(CLI) Use the show version command to verify the software version of your ASA. (ASDM) The software version appears on the ASDM home page; view the home page to verify the software version of your ASA.

Upgrading the Operating System and ASDM Images

This section describes how to install the ASDM and operating system (OS) images.

We recommend that you upgrade the ASDM image before the OS image. ASDM is backward compatible, so you can upgrade the OS using the new ASDM; however, you cannot use an old ASDM image with a new OS.

For information about upgrading software in a failover pair, see the “Performing Zero Downtime Upgrades for Failover Pairs” chapter in the CLI configuration guide.


NoteIf the ASA is running Version 8.0 or later, then you can upgrade to the latest version of ASDM (and disconnect and reconnect to start running it) before upgrading the OS.

If the ASA is running a version earlier than 8.0, then use the already installed version of ASDM to upgrade both the OS and ASDM to the latest versions, and then reload.


Upgrade Using the CLI

Detailed Steps

This procedure uses TFTP. For FTP or HTTP, see the copy command.


Step 1 If you have a Cisco.com login, you can obtain the OS and ASDM images from the following website:

http://www.cisco.com/go/asa-software

Step 2 Back up your configuration file. To print the configuration to the terminal, enter the following command:

hostname# show running-config
 

Copy the output from this command, then paste the configuration in to a text file.


Note If you are upgrading from a pre-8.3 version, then the running configuration is backed up automatically.


For other methods of backing up, see the “Managing Software and Configurations” chapter in the CLI configuration guide.

Step 3 Install the new images using TFTP. Enter this command separately for the OS image and the ASDM image:

hostname# copy tftp://server[/path]/filename {disk0:/ | disk1:/}[path/]filename
 

For example:

hostname# copy tftp://10.1.1.1/asa840-4-k8.bin disk0:/asa841-k8.bin
...
hostname# copy tftp://10.1.1.1/asdm-64099.bin disk0:/asdm-641.bin
 

If your ASA does not have enough memory to hold two images, overwrite the old image with the new one by specifying the same destination filename as the existing image.

Step 4 To change the OS boot image to the new image name, enter the following commands:

hostname(config)# clear configure boot
hostname(config)# boot system {disk0:/ | disk1:/}[path/]new_filename
 

For example:

hostname(config)# clear configure boot
hostname(config)# boot system disk0:/asa841-k8.bin
 

Step 5 To configure the ASDM image to the new image name, enter the following command:

hostname(config)# asdm image {disk0:/ | disk1:/}[path/]new_filename
 

Step 6 To save the configuration and reload, enter the following commands:

hostname(config)# write memory
hostname(config)# reload
 


 

Upgrading Using ASDM 6.3 or Later

Detailed Steps


Step 1 Back up your existing configuration. For example, choose File > Show Running Configuration in New Window to open the configuration as an HTML page. You can also use one of the File > Save Running Configuration options.

Step 2 Choose Tools > Check for ASA/ASDM Updates .

In multiple context mode, access this menu from the System.

The Cisco.com Authentication dialog box appears.

Step 3 Enter your assigned Cisco.com username and the Cisco.com password, and then click Login .

The Cisco.com Upgrade Wizard appears.

Step 4 Complete the upgrade wizard.

Step 5 For the upgrade versions to take effect, check the Save configuration and reload device now check box to restart the ASA and restart ASDM.

Step 6 Click Finish to exit the wizard and save the configuration changes that you made.


 

Upgrading Using ASDM 6.0 Through ASDM 6.2

Detailed Steps


Step 1 Back up your existing configuration. For example, choose File > Show Running Configuration in New Window to open the configuration as an HTML page. You can also use one of the File > Save Running Configuration options.

Step 2 From the Tools menu, choose Tools > Upgrade Software from Cisco.com .

In multiple context mode, access this menu from the System.

The Upgrade Software from Cisco.com Wizard appears.

Step 3 Click Next .

The Authentication screen appears.

Step 4 Enter your Cisco.com username and password, and click Next .

The Image Selection screen appears.

Step 5 Check the Upgrade the ASA version check box and the Upgrade the ASDM version check box to specify the most current images to which you want to upgrade, and click Next .

The Selected Images screen appears.

Step 6 Verify that the image file you have selected is the correct one, and then click Next to start the upgrade.

The wizard indicates that the upgrade will take a few minutes. You can then view the status of the upgrade as it progresses.

The Results screen appears. This screen provides additional details, such as whether the upgrade failed or whether you want to save the configuration and reload the ASA.

If you upgraded the ASA version and the upgrade succeeded, an option to save the configuration and reload the ASA appears.

Step 7 Click Yes .

For the upgrade versions to take effect, you must save the configuration, reload the ASA, and restart ASDM.

Step 8 Click Finish to exit the wizard when the upgrade is finished.

Step 9 After the ASA reloads, restart ASDM.


 

Upgrading Using ASDM 5.2 or Earlier

Detailed Steps


Step 1 You can obtain the OS and ASDM images from the following website:

http://www.cisco.com/go/asa-software

Download the images to your local computer.

Step 2 In ASDM, back up your existing configuration. For example, choose File > Show Running Configuration in New Window to open the configuration as an HTML page. You can also use one of the File > Save Running Configuration options.

Step 3 Choose Tools > Upgrade Software .

Step 4 From the Image to Upload drop-down list, choose ASDM .

Step 5 Click Browse Local Files , and browse to the ASDM image you downloaded from Cisco.com.

Step 6 Click Browse Flash to determine where to install the new ASDM image.

The Browse Flash dialog box appears. Choose the new location, and click OK . If you do not have room for both the current image and the new image, you can install over the current image.

Step 7 Click Upload Image .

Wait for the image to upload. An information window appears that indicates a successful upload.

Step 8 Repeat Step 3 through Step 7, choosing ASA from the Image to Upload drop-down list.

Step 9 Click Close to exit the Upgrade Software dialog box.

Step 10 If you saved the new images to a different location from the old ones, you need to configure the ASA to use the new image locations.

a. Choose Configuration > Properties > Device Administration > Boot Image/Configuration .

b. In the Boot Configuration table, click Add to add the new image (if you have fewer than four images listed); or you can choose an existing image and click Edit to change it to the new one.

If you do not specify an image, the ASA searches the internal flash memory for the first valid image to boot; we recommend booting from a specific image.

c. Click Browse Flash , choose the OS image, and click OK .

d. Click OK to return to the Boot Image/Configuration pane.

e. Make sure the new image is the first image in the table by using the Move Up button as needed.

f. In the ASDM Image Configuration area, click Browse Flash , choose the ASDM image, and click OK .

g. Click Apply .

Step 11 Choose File > Save Running Configuration to Flash to save your configuration changes.

Step 12 Choose Tools > System Reload to reload the ASA.

A new window appears that asks you to verify the details of the reload. Select Save the running configuration at the time of reload and then choose a time to reload. Choose the option as desired.

Once the reload is in progress, a Reload Status window appears that indicates that a reload is being performed. An option to exit ASDM is also provided.

Step 13 After the ASA reloads, restart ASDM.


 

 

Copyright © 2014 Cisco Systems, Inc. All rights reserved.