Move config from one ASA to another

[brivan]

I'm upgrading ASA firewalls from a 5510 (running 8.2.2 code) to a 5515-X (running 8.6.1 code).  What is the best way to move the existing config to the new firewall?  Can I simply copy it?

[julomban]

Hello,

The NAT rules are not the same so you cannot copy and paste those rules from the ASA5510 into the 5515-X.

Below you can find a very good doc about new NAT config and NAT examples:

https://supportforums.cisco.com/docs/DOC-9129

Regards,

Juan Lombana

Please rate helpful posts.

[Stephen Brady]

I have done a few of these, definitely read through the docs posted by the last poster.  The other thing you can do is if you have a spare ASA you can copy the configuration onto that running the same code version that you are running currently.  Then perform the upgrade to 8.6(1) and it will migrate your NAT statements and access rules automatically.  I would do it offline and then compare the results Old to New, then check the document posted above for what the migration should look like.