Updating two FWSM in active/passive state

[A.ciscotrade]

Hi,

I have two FWSM modules on two 6509 switches. Last night I updated the active FWSM, but I don't know how to update the passive one! One solution that came up to my mind was to change the active one, to act in passive state, and then change the passive one, which doesn't have the update, and then update it. But I guess there should be some other ways to do so without using failover. Any help?

Thanks

[Jouni Forss]

Hi,

So you have FWSMs in Active/Standby Failover pair and you have started updates with updating the Active FWSM.

Wouldnt this mean that the previously Standby device would now be Active?

Generally Failover pair software is updated in the following way

• Load new software to FWSM2 - Standby device
• Reload the FWSM2 - Standby device to the new software
• Make FWSM2 - Standby -> FWSM2 - Active
• Now FWSM1 is Standby
• Load the new software to FWSM1
• Reload the FWSM1 with the new software
• Change FWSM1 back to the Active device

I cant' see a way where you wouldnt switch the Active/Standby roles of the FWSM. At some point you have to reload the device that is Active. And according to the above information you gave you already updated the Active device so that should already mean you caused a Failover between the FWSMs

- Jouni

[Kureli Sankar]

Perfect Jouni.

1) on the active unit's system context, execute "write mem all" (if multiple context otherwise just "wr mem")

2) copy the new image to the standby unit

3) reload the standby unit which will come back as standby and running

the new code

4) on the standby execute "failover active", it is now the active unit

5) on the unit that is now standby, copy the new image to it

6) reload the standby unit

http://www.cisco.com/en/US/docs/security/fwsm/fwsm40/configuration/guide/swcnfg_f.html#wp1064232

-Kureli

---------------------------------

Pls. take a few minutes to fill out this poll and help me tailor the content for the breakout session on ASA-CX, Cisco Live Orlando 2013.

https://supportforums.cisco.com/polls/1232