01-10-2014 06:10 AM - edited 03-10-2019 06:07 AM
I have a customer that has an ASA5510 with AIP-SSM-10 installed and they want to move this module to an ASA5520. The ASA5510 with AIP is in production and has all the licensing installed. My questions are...
1. Will I need to start from scratch on the AIP configuration or can I move the module to the ASA5520 without much hassle?
2. Will I need to change or purchase any licensing on either the ASA5520 or AIP module once it's moved?
3. Are there any other gotchas I should be aware of when doing this move?
Thanks in advance for your help.
01-11-2014 05:06 AM
Hello,
1)
I would say yes as you will need to reset it to change all of the network settings so it can adapt to the new network IP configuration, etc.
2)
No, licensing affects directly the IPS module not the parent ASA.
3)
Make sure you are not running failover on any of the cases and if yes then
-if you remove the IPS failover will be removed as hardware do not mach
-for the new HA make sure both have IPS module (hardware not matching will turn off failover)
Looking for some Networking Assistance?
Contact me directly at jcarvaja@laguiadelnetworking.com
I will fix your problem ASAP.
Cheers,
Julio Carvajal Segura
http://laguiadelnetworking.com
02-02-2014 04:07 PM
rchilcote keep us posted on how that move worked out; I am interested to hear any undocumented gotchas specifically killing the production ASA simply by REMOVING that module
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide