topic You may get the best results in Network Security

Upgrade Problem

Raimund Schimanovits — Tue, 12 Mar 2019 07:25:07 GMT

Hello

I have a ASA 5510 with 8.0(5)31 and now i bougth a new ASA 5508 with 9.4(1).

Now i see that the config is not compatible. What can i do? Write a new config? Is there any tool to convert the NAT ?

Thanks

Is there a possibility of

linus.laeubli — Mon, 29 Feb 2016 10:34:21 GMT

Is there a possibility of Upgrading the 5510 to 9.4(1)?
If so I'd do that, since the ASA should automatically convert the config.

Alternatively you could try downgrading the 5508 and then upgrading again?

I bought a new because i need

Raimund Schimanovits — Mon, 29 Feb 2016 13:28:01 GMT

I bought a new because i need more ports so i did not want to upgrade the old one. Can i copy the old config to the new ASA and it would work without any problems? I read that there are a lot of changes in the NAT config.

Thanks

Sorry if I didn't make myself

linus.laeubli — Mon, 29 Feb 2016 13:32:32 GMT

Sorry if I didn't make myself clear:

1. Upgrade the 5510 to 9.4(1) (have a look at upgrade path for that, don't direct upgrade)
2. Backup config, and everything else
3. Restore config on your new 5508

At least that is the only way I can think of right now

Ok. Thanks i will test it.

Raimund Schimanovits — Mon, 29 Feb 2016 14:30:11 GMT

Ok. Thanks i will test it.

You may get the best results

James Leinweber — Mon, 07 Mar 2016 22:30:22 GMT

You may get the best results from rewriting the config, but by all means try an automatic upgrade to see what happens. The two biggest changes are:

* at 8.3, they completely redid the way NAT works (new style has phase I "twice NAT" rules and phase II object NAT rules; the old global NAT stuff is gone)

* at 9.0, they unified v4 and v6 access lists (the "any" keyword becomes dual-stack)

-- Jim Leinweber, WI State Lab of Hygiene