https://community.cisco.com/t5/network-security/possible-to-migrate-config-from-one-asav-to-another/m-p/3862998#M26052 <P>thanks for the reply , what is the cli commands to check the tunnel status ? once i migrate the config i will want to make sure the tunnels come back up .&nbsp;</P> Sun, 26 May 2019 18:08:10 GMT nflnetwork 2019-05-26T18:08:10Z https://community.cisco.com/t5/network-security/possible-to-migrate-config-from-one-asav-to-another/m-p/3862957#M25924 <P>we are upgrading an ASAv5 to an ASAv10 ....</P><P>&nbsp;</P><P>can i just take the running config of the ASAv5 and paste it into the ASAv10?</P><P>&nbsp;</P><P>Is there anything that might not copy over that i need to be concerned about or should this be straight-forward?&nbsp;</P> Sun, 26 May 2019 14:41:25 GMT https://community.cisco.com/t5/network-security/possible-to-migrate-config-from-one-asav-to-another/m-p/3862957#M25924 nflnetwork 2019-05-26T14:41:25Z https://community.cisco.com/t5/network-security/possible-to-migrate-config-from-one-asav-to-another/m-p/3862960#M26045 <P>As long as both ASAs are on version 9.x you should be ok. nothing to worry.</P> Sun, 26 May 2019 14:52:16 GMT https://community.cisco.com/t5/network-security/possible-to-migrate-config-from-one-asav-to-another/m-p/3862960#M26045 Sheraz.Salim 2019-05-26T14:52:16Z https://community.cisco.com/t5/network-security/possible-to-migrate-config-from-one-asav-to-another/m-p/3862971#M26046 What about vpn tunnels and the pre shared keys or any user passwords?<BR /> Sun, 26 May 2019 15:54:20 GMT https://community.cisco.com/t5/network-security/possible-to-migrate-config-from-one-asav-to-another/m-p/3862971#M26046 nflnetwork 2019-05-26T15:54:20Z https://community.cisco.com/t5/network-security/possible-to-migrate-config-from-one-asav-to-another/m-p/3862978#M26050 <P>vpn tunnel pre shared key can be seen by giving the command</P><P>&nbsp;</P><P>more system:running-config</P><P>the above command will show you the pre-shared key configured for you vpn tunnels.</P><P>&nbsp;</P><P>&nbsp;</P><P>in regards to local username password you have to configure a new password your existing usernames</P> Sun, 26 May 2019 16:28:28 GMT https://community.cisco.com/t5/network-security/possible-to-migrate-config-from-one-asav-to-another/m-p/3862978#M26050 Sheraz.Salim 2019-05-26T16:28:28Z https://community.cisco.com/t5/network-security/possible-to-migrate-config-from-one-asav-to-another/m-p/3862998#M26052 <P>thanks for the reply , what is the cli commands to check the tunnel status ? once i migrate the config i will want to make sure the tunnels come back up .&nbsp;</P> Sun, 26 May 2019 18:08:10 GMT https://community.cisco.com/t5/network-security/possible-to-migrate-config-from-one-asav-to-another/m-p/3862998#M26052 nflnetwork 2019-05-26T18:08:10Z https://community.cisco.com/t5/network-security/possible-to-migrate-config-from-one-asav-to-another/m-p/3863010#M26055 <P>there are few.</P><P>from cli</P><P>&nbsp;</P><P>show vpn session</P> Sun, 26 May 2019 18:57:16 GMT https://community.cisco.com/t5/network-security/possible-to-migrate-config-from-one-asav-to-another/m-p/3863010#M26055 Sheraz.Salim 2019-05-26T18:57:16Z https://community.cisco.com/t5/network-security/possible-to-migrate-config-from-one-asav-to-another/m-p/3863056#M26056 that does not work<BR /><BR />ASAv5# show vpn session<BR />^<BR />ERROR: % Invalid input detected at '^' marker.<BR />ASAv5#<BR />ASAv5#<BR /><BR /> Sun, 26 May 2019 22:42:11 GMT https://community.cisco.com/t5/network-security/possible-to-migrate-config-from-one-asav-to-another/m-p/3863056#M26056 nflnetwork 2019-05-26T22:42:11Z https://community.cisco.com/t5/network-security/possible-to-migrate-config-from-one-asav-to-another/m-p/3863120#M26057 <P>Hi,</P><P>use the below commands to see the VPN tunnel details</P><P><EM><STRONG>show vpn-sessiondb</STRONG></EM> you can see the VPN session summary</P><P><EM><STRONG>show vpn-sessiondb l2l&nbsp;</STRONG> </EM>or<EM><STRONG> show crypto isakmp sa</STRONG></EM> you can see the site to site tunnel</P><P><EM><STRONG>show vpn-sessiondb anyconnect</STRONG> </EM>you can see the anyconnect clients connected</P><P><EM><STRONG>show vpn-sessiondb webvpn</STRONG> </EM>you can see the clients connected via webvpn</P><P>&nbsp;</P><P>Hope This Helps</P><P>Abheesh</P><P>&nbsp;</P><P>&nbsp;</P> Mon, 27 May 2019 06:38:20 GMT https://community.cisco.com/t5/network-security/possible-to-migrate-config-from-one-asav-to-another/m-p/3863120#M26057 Abheesh Kumar 2019-05-27T06:38:20Z