08-30-2016 03:15 AM - edited 03-12-2019 01:12 AM
Hi team,
Please help me on upgrading an Active/Standby ASA with multiple context. Hope you could give me detailed procedure for the upgrade. We have 8.2.5 software version and upgrading to 9.1.7. I am not well versed on multiple context. How will I verify if all the context are active on the ASA.
Thank you for your response!:)
Regards,
Mady
08-31-2016 01:05 AM
Note: In Multiple context this need to be do in system context.
To upgrade the Active/Standby failover pair, perform the following steps.
(CLI) Perform these steps on the active unit.
Step 1 (If there is a configuration migration) Show the configuration on the terminal so that you can back up your configuration:
Copy the output from this command, then paste the configuration in to a text file. For other methods of backing up, see the configuration guide.
Step 2 Copy the ASA software to the active unit flash memory:
For other methods than TFTP, see the copy command.
Step 3 Copy the software to the standby unit; be sure to specify the same path as for the active unit:
Step 4 Copy the ASDM image to the active unit flash memory:
Step 5 Copy the ASDM image to the standby unit; be sure to specify the same path as for the active unit:
Step 6 If you are not already in global configuration mode, access global configuration mode:
Step 7 Show the current boot images configured (up to 4):
The ASA uses the images in the order listed; if the first image is unavailable, the next image is used, and so on. You cannot insert a new image URL at the top of the list; to specify the new image to be first, you must remove any existing entries, and enter the image URLs in the order desired, according to Step 8 andStep 9.
Step 8 Remove any existing boot image configurations so that you can enter the new boot image as your first choice:
Step 9 Set the ASA image to boot (the one you just uploaded):
Repeat this command for any backup images that you want to use in case this image is unavailable. For example, you can re-enter the images that you previously removed in Step 8.
Step 10 Set the ASDM image to use (the one you just uploaded):
You can only configure one ASDM image to use, so you do not need to first remove the existing configuration.
Step 11 Save the new settings to the startup configuration:
Step 12 Reload the standby unit to boot the new image:
Wait for the standby unit to finish loading. Use the show failover command to verify that the standby unit is in the Standby Ready state.
Step 13 Force the active unit to fail over to the standby unit:
Step 14 Reload the former active unit (now the new standby unit):
04-12-2018 10:45 AM
Hi Pawan,
Thanks. How to put back the multiple virtual security contexts config back in firewall. Does it preserve the config while performing IOS upgrade . Please assist
04-16-2018 04:21 AM
05-31-2024 10:30 AM
what about Active/Active (multi context with 2 failover groups) upgrade ,does it have the same process as of Active/standby ?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide