ASA 5512 Upgrade ( From 9.0.3 to 9.1.6)

[pushpak.lele]

Hello

We have 2 ASAs( 5512) configured in active standby mode. Ios version is 9.0.3 for bothe the ASAs.

We are trying to upgrade the IOS to 9.1.6 . First we upgraded the IOS to the version 9.1.3 at this point failover works properly.

When we try to upgrade standby firewall to 9.1.6 once rebooted it boots from the 9.1.6 but it cannot find the active mate.

What can be the issue as with all other earlier versions of IOS failover is working properly.

Thanks And Regards

Pushpak

[Iqbal Shaikh]

Check failover config, If looks ok. Then may be bug, contact cisco tac.

[Rishabh Seth]

Hi,

Try to ping the two ASAs over failover link IP addresses and ensure reachability is there between two firewalls on failover link.

If it is not connected directly then you can check the vlan configuration on switch.

Let us know if you still face the issue,

Thanks,

RS

[pushpak.lele]

Hi Rishabh,

When booted with ios version 9.1.3 ping works from bothe the ASAs. But when we upgrade it to 9.1.6 ping wont work. Both the ASAs are connected back to back and not through switch.

Faiover configuration is proper as it works with 9.1.3 unless there are some changes in version 9.1.3.

Thanks

Pushpak