ASA UPGRADE from 7.1 to 8.4

[Muhammad Waqas Hussain]

HI All,

i need to upgrade ASA 5540 from 7.1 to 8.4 for secure connect feature of Cisco Jabber Configuration. Support forum guides that, i need to follow upgrade path from 7.1 --> 7.2  --> 8.0 --> 8.2 -->8.4 and also do a memory upgrade from 1GB to 2GB.

https://supportforums.cisco.com/docs/DOC-12690

I need to use this feature for only three or maximum four users in company then would i really need to do  memory upgrade? or can i go with 1GB memory?
also how i can get the prices of part number "ASA5540-MEM-2GB=" at cisco.com?

Please go through the sh version of ASA and share your suggestion.

ASA-ISB-HQ# sh version

Cisco Adaptive Security Appliance Software Version 7.1(2)

Device Manager Version 5.1(2)

Compiled on Tue 14-Mar-06 17:00 by dalecki

System image file is "disk0:/asa712-k8.bin"

Config file at boot was "startup-config"

ASA-ISB-HQ up 1 day 7 hours

Hardware:   ASA5540, 1024 MB RAM, CPU Pentium 4 2000 MHz

Internal ATA Compact Flash, 256MB

BIOS Flash M50FW080 @ 0xffe00000, 1024KB

Encryption hardware device : Cisco ASA-55x0 on-board accelerator (revision 0x0)

                             Boot microcode   : CNlite-MC-Boot-Cisco-1.2

                             SSL/IKE microcode: CNlite-MC-IPSEC-Admin-3.03

                             IPSec microcode  : CNlite-MC-IPSECm-MAIN-2.04

0: Ext: GigabitEthernet0/0  : address is 001b.d5fb.67b2, irq 9

1: Ext: GigabitEthernet0/1  : address is 001b.d5fb.67b3, irq 9

2: Ext: GigabitEthernet0/2  : address is 001b.d5fb.67b4, irq 9

3: Ext: GigabitEthernet0/3  : address is 001b.d5fb.67b5, irq 9

4: Ext: Management0/0       : address is 001b.d5fb.67b1, irq 11

5: Int: Not licensed        : irq 11

6: Int: Not licensed        : irq 5

Licensed features for this platform:

Maximum Physical Interfaces : Unlimited

Maximum VLANs               : 200      

Inside Hosts                : Unlimited

Failover                    : Active/Active

VPN-DES                     : Enabled  

VPN-3DES-AES                : Enabled  

Security Contexts           : 2        

GTP/GPRS                    : Disabled 

VPN Peers                   : 5000     

WebVPN Peers                : 25       

This platform has an ASA 5540 VPN Premium license.

ASA-ISB-HQ#

ASA-ISB-HQ# sh version | I RAM

Hardware:   ASA5540, 1024 MB RAM, CPU Pentium 4 2000 MHz

ASA-ISB-HQ#

ASA-ISB-HQ# SH memory

Free memory:       990265544 bytes (92%)

Used memory:        83476280 bytes ( 8%)

-------------     ----------------

Total memory:     1073741824 bytes (100%)

ASA-ISB-HQ#

Looking forward to reply.

Thanks & Regards,

Waqas

[Ramraj Sivagnanam Sivajanam]

Hi Bro

As long as you need to upgrade your Cisco ASA FW to v8.3 and above, you’ll need to run 2GB of Memory.

You can’t check pricing on the Cisco website, but you could always refer to a local Cisco Gold Partner for pricing quotation instead. To my knowledge, the ASA5540-MEM-2GB= is about USD 600. Cisco Gold Partners always gives you the best discount rate, besides always giving you original parts.

By the way, Cisco Jabber can also run on Cisco ASA FW with v8.2.3 as well. Hence, why do you need to upgrade the Cisco ASA FW? However, there’s no harm in upgrading :-)

P/S: If you find this comment useful, please do rate them nicely :-)

[Muhammad Waqas Hussain]

Hi Ramraj,

Thanks for your reply. sorry, i just saw your answer that's why i couldn't reply. I have upgraded the ASA to 8.2.5 and now i think i just need to upload anyconnect vpn licenses, Please correct me , if i am wrong and also what is the part number of ASA-ANYCONNECT-VPN-LICENSE?

# sh version

Cisco Adaptive Security Appliance Software Version 8.2(5)

Device Manager Version 6.4(9)

Compiled on Fri 20-May-11 16:00 by builders

System image file is "disk0:/asa825-k8.bin"

Config file at boot was "startup-config"

ASA-ISB-HQ up 23 days 4 hours

Hardware:   ASA5540, 1024 MB RAM, CPU Pentium 4 2000 MHz

Internal ATA Compact Flash, 256MB

BIOS Flash M50FW080 @ 0xffe00000, 1024KB

Encryption hardware device : Cisco ASA-55x0 on-board accelerator (revision 0x0)

                             Boot microcode   : CN1000-MC-BOOT-2.00

                             SSL/IKE microcode: CNLite-MC-SSLm-PLUS-2.03

                             IPSec microcode  : CNlite-MC-IPSECm-MAIN-2.05

0: Ext: GigabitEthernet0/0  : address is 001b.d5fb.67b2, irq 9

1: Ext: GigabitEthernet0/1  : address is 001b.d5fb.67b3, irq 9

2: Ext: GigabitEthernet0/2  : address is 001b.d5fb.67b4, irq 9

3: Ext: GigabitEthernet0/3  : address is 001b.d5fb.67b5, irq 9

4: Ext: Management0/0       : address is 001b.d5fb.67b1, irq 11

5: Int: Not used            : irq 11

6: Int: Not used            : irq 5

Licensed features for this platform:

Maximum Physical Interfaces    : Unlimited

Maximum VLANs                  : 200

Inside Hosts                   : Unlimited

Failover                       : Active/Active

VPN-DES                        : Enabled

VPN-3DES-AES                   : Enabled

Security Contexts              : 2

GTP/GPRS                       : Disabled

SSL VPN Peers                  : 25

Total VPN Peers                : 5000

Shared License                 : Disabled

AnyConnect for Mobile          : Disabled

AnyConnect for Cisco VPN Phone : Disabled

AnyConnect Essentials          : Disabled

Advanced Endpoint Assessment   : Disabled

UC Phone Proxy Sessions        : 2

Total UC Proxy Sessions        : 2

Botnet Traffic Filter          : Disabled

This platform has an ASA 5540 VPN Premium license.