Upgrade Problem

[Raimund Schimanovits]

Hello

I have a ASA 5510 with 8.0(5)31  and now i bougth a new ASA 5508 with 9.4(1).

Now i see that the config is not compatible. What can i do? Write a new config? Is there any tool to convert the NAT ?

Thanks

[linus.laeubli]

Is there a possibility of Upgrading the 5510 to 9.4(1)?
If so I'd do that, since the ASA should automatically convert the config.

Alternatively you could try downgrading the 5508 and then upgrading again?

[Raimund Schimanovits]

I bought a new because i need more ports so i did not want to upgrade the old one. Can i copy the old config to the new ASA and it would work without any problems? I read that there are a lot of changes in the NAT config.

Thanks

[linus.laeubli]

Sorry if I didn't make myself clear:

1. Upgrade the 5510 to 9.4(1) (have a look at upgrade path for that, don't direct upgrade)
2. Backup config, and everything else
3. Restore config on your new 5508

At least that is the only way I can think of right now

[Raimund Schimanovits]

Ok. Thanks i will test it.

[James Leinweber]

You may get the best results from rewriting the config, but by all means try an automatic upgrade to see what happens.  The two biggest changes are:

* at 8.3, they completely redid the way NAT works (new style has phase I "twice NAT" rules and phase II object NAT rules; the old global NAT stuff is gone)

* at 9.0, they unified v4 and v6 access lists (the "any" keyword becomes dual-stack)

-- Jim Leinweber, WI State Lab of Hygiene