topic Correct way to replace config on asa in Network Security

Correct way to replace config on asa

carl_townshend — Tue, 12 Mar 2019 03:40:52 GMT

Hi all

If I want to replace the current config on my asa what is the best way of doing it ?

Correct way to replace config on asa

Marius Gunnerud — Wed, 05 Feb 2014 18:24:45 GMT

You can copy and paste the new configuration in after you have erased the old configuration. I suggest copy pasting approx. 10 lines at a time. This makes it easier to troubleshoot if you see any errors.

There are two ways of erasing your config. the first way is to use the command configure factory-default [ip_address [mask]] This will set the ASA config to the way it was when you first recieved it, so there will be some configuration left on it such as boot system,DHCP, ASDM, etc. The IP address is the management IP you will used to connect to the ASA if you are not connecting via a serial cable.

The other way is to use the command write erase. This deletes all configuration from the ASA. Here you will need to configure everything from scratch

Now to copy your config into the ASA again you could either copy paste your config from notepad, I suggest copying around 10 lines at a time, as this makes it easier to troubleshoot if you see any errors.

Another way is to copy the running config straight from a TFTP server to the running-config

copy tftp running-config

just remember to save the running-config to the startup-config

--
Please remember to rate and select a correct answer

Correct way to replace config on asa

carl_townshend — Wed, 05 Feb 2014 19:15:29 GMT

Suppose we already have a config in there and want to replace it, if we do a copy tftp run it will merge the config.

Can we do a copy tftp startup config to replace the startup config then reload?

What is the command to change the config that it will boot next from ?

And if we changed this would we still need to do a copy run start after ?

Correct way to replace config on asa

Marius Gunnerud — Wed, 05 Feb 2014 20:04:44 GMT

Suppose we already have a config in there and want to replace it, if we do a copy tftp run it will merge the config.

That is correct.

Can we do a copy tftp startup config to replace the startup config then reload?

This is an option you could do.

What is the command to change the config that it will boot next from ?

And if we changed this would we still need to do a copy run start after ?

boot config disk0:/

This will set the boot config file to whichever file you want to use as your startup config file. Just remember that you will no long be saving the running config to the startup if you use this command. You will need to save it to the config file. Also, disk0 is where the files are stored by default but if you have changed where the config files are stored just change to the correct disk / location.

Here is a good link on file management on the ASA

http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/admin_swconfig.html#wp1044108

--
Please remember to rate and select a correct answer