08-07-2023 07:13 AM
Hello everybody,
I have the task to upgrade a Firepower 2130 running ASA image 9.14
with 9.18.
Im know it is a tricky procedure and the customer claims that previous
upgrades were performed from a USB stick plugged in the Firepower 2130
appliance.
When I consult the guide:
https://www.cisco.com/c/en/us/td/docs/security/asa/upgrade/asa-upgrade/firepower-4100-9300.html
I don't read something about this possibility.
Is it really possible to use a USB stick to copy the *.ASP image to the
appliance and if yes where is a guide for this?
Thanks a lot for every hint!
Bye
R.
Solved! Go to Solution.
08-07-2023 09:05 AM - edited 08-07-2023 09:06 AM
Once you have ASA up and running, you can use the ASA OS for the upgrade and you don't need to mess with the FXOS image. (At least in appliance mode). You can use ASA code to copy usb flash, change the boot setting in ASA and reboot. You should not need to mess with the FXOS. Again, make sure the ASA is in appliance mode and not platform mode.
In FXOS, you can verify the mode:
! From FXOS CLI
firepower-1010# show fxos-mode
Mode is currently set to appliance
Then you can just copy the ASA .bin image from the usb stick or scp, tftp, etc. As long as you are in appliance mode, the ASA software will take care of all of the underlying image stuffs for you.
! from ASA CLI
Aaron-1010(config)# boot system disk0:/cisco-asa-fp1k.9.18.3.53.SPA
The system is currently installed with security software package 9.19.1, which has:
- The platform version: 2.13.0.198
- The CSP (asa) version: 9.19.1
Preparing new image for install...
!!!!!!
08-07-2023 09:05 AM - edited 08-07-2023 09:06 AM
Once you have ASA up and running, you can use the ASA OS for the upgrade and you don't need to mess with the FXOS image. (At least in appliance mode). You can use ASA code to copy usb flash, change the boot setting in ASA and reboot. You should not need to mess with the FXOS. Again, make sure the ASA is in appliance mode and not platform mode.
In FXOS, you can verify the mode:
! From FXOS CLI
firepower-1010# show fxos-mode
Mode is currently set to appliance
Then you can just copy the ASA .bin image from the usb stick or scp, tftp, etc. As long as you are in appliance mode, the ASA software will take care of all of the underlying image stuffs for you.
! from ASA CLI
Aaron-1010(config)# boot system disk0:/cisco-asa-fp1k.9.18.3.53.SPA
The system is currently installed with security software package 9.19.1, which has:
- The platform version: 2.13.0.198
- The CSP (asa) version: 9.19.1
Preparing new image for install...
!!!!!!
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide