ASA5505 v 8.0 to 8.2 to 8.3 – ok, then 8.4 and ... problems

[Alar Pandis]

Hi!

Had version 8.0 installed. Thought, maybe is good idea to upgrade. Tried to 8.2 ... fine, then to 8.3 ... fine (NAT section showed up differently, but everything did work), then ... 8.4(5) and ... problems started. VPN connection to outside didn't work anymore (did work before) and web-connection very sloooow. Didn't change anything in ASA conf, just did upgrade. Using ASDM, not good at command line. Tried several times, all the same. As soon 8.4 coming into play ... problems.

Probably I missed something. Any ideas, suggestions?

More thanks, Alar.

[Vibhor Amrodia]

Hi,

Firstly , I think you should've followed this upgrade path:-

8.2 >> 8.4.7

Also , it would depend on the configuration that you have on the device.

If possible , post the pre and post migrated configuration or give it a shot of upgrading the configuration to the ASA 8.4.7 and see if that works.

Thanks and Regards,

Vibhor Amrodia

[Alar Pandis]

Hi and thanks!

I followed http://www.cisco.com/c/en/us/td/docs/security/asa/asa84/upgrade/upgrade84.html#pgfId-50573 where is written ... 8.2(x) and earlier first upgrade to 8.4(5) or 8.4(6) and then to 8.4.(7) or later. So, it wasn't right?

More thanks, Alar.

[Vibhor Amrodia]

Hi,

It is not incorrect but there might be some issues seen with the earlier versions which should be resolved on the ASA 8.4.7 code and hence i would recommend that upgrade path.

Thanks and Regards,

Vibhor Amrodia

[Alar Pandis]

Hi again and thanks again!

Tried directly 8.2 to 8.4(7) and same problem.
Any further ideas?

More thanks, Alar.
 

[Vibhor Amrodia]

Hi,

In that case , i would request you to post the configuration and list all the issue that you are seeing after the upgrade.

Thanks and Regards,

Vibhor Amrodia
 

[Alar Pandis]

Hi and thanks!

Upgrade_startup_errors file is attached. Before upgrade I could get VPN-contact to outside address, after upgrade not. Web browsing did go smoothly, after upgrade it ... takes a time and time and get something and something not. Ping seems to work ok both cases. At some point I removed all NAT rules and created new for networks ... same result.

More thanks, Alar.

[Vibhor Amrodia]

Hi,

From the logs that you have posted , i don't see any issues with any configuration errors on the ASA device. All the errors looks normal.

I think you would have to debug the issue that you are seeing as it doesn't seem to be related directly to the upgrade on the ASA device.

Thanks and Regards,

Vibhor Amrodia
 

[Alar Pandis]

Hi and thanks!

Well, debugging is probably too much for me to accomplish. Strange. And upgrade to v 8.3 goes also well, meaning, no such issue noticed. But after 4.x ... .

More thanks, Alar.

[Alar Pandis]

Maybe is worth to try upgrade to 9.1...5 ?

Alar.

[prateek.verma]

Hi Alar,

What exactly are the errors or problems you are facing after upgrading? Is there any service or something which was working before and stopped working now. Please elaborate.

Regards,

Prateek Verma

[Alar Pandis]

Hi!
Got it. Yesterday tried to upgrade from 8.2 to 9.1. All same. I repeat – nothing I changed in conf and before these upgrades all connectivity to outside was ok, after upgrades (above 8.4, with 8.3 was ok) I lost connectivity (beside ping) to outside, well, http seems to ... stuck. Well, I'm not good at it, so, I thought something went wrong during upgrade. Anyway. Yesterday after unsuccessful upgrade to 9.1 I start to dig a bit, because I noticed that even connection to local gateway was lost. Mh. Then I took a look to routing. Everything seems to be ok, meaning showing ok. Thought, maybe is good idea to re-enter settings there and, voila!, that was it. Something, not know what, was wrong with routing. As soon I just re-entered values there everything went ok again.
Alar.