Migrating from ASA 5510 to 5512-x

[hmc2500]

Hi, what else besides restoring the config do you need to do migrate everything from an old ASA 5510 to ASA 5512-X?

Will the certificates migrate too when you restore the config?

[Karsten Iwen · Accepted solution]

You can't directly restore a backup that was taken from an 5510. There are a couple of things to think about:

• The interface are named differently on the ASA 5512-X.
• Based on the version you are running, there could be changes in the syntax, for example for TLS-based VPNs.
• If you have an SSD in your 5512-X and a FirePOWER license you can think about migrating parts of access-control to FirePower.

All in all, a replacement like this is a good chance to re-evaluate the whole config and start over.

[Marvin Rhoads]

All in all, a replacement like this is a good chance to re-evaluate the whole config and start over.

Hear hear - I heartily agree.

(and no - certificates depend on the private key of the original ASA and do not copy over easily.)