Once completed, an Information window appears that indicates a successful upload and if the image should be set as boot image. Select Yes. A new window appears that asks you to verify the details of the reload.
Select Save the running configuration at the time of reload and then choose a time to reload. You can also specify whether or not the device should force a reload immediately if a scheduled reload fails. Check On Reload failure, force an immediate reload after and then specify a maximum hold time. This is the amount of time that the security appliance waits to notify other subsystems before a shutdown or reboot.
Click Schedule Reload. Once the reload is in progress, a Reload Status window appears that indicates that a reload is being performed. An option to exit ASDM is also provided. Select ASDM as the image type to upload from the drop-down menu. Click OK once the image is updated with the new image. When the username and password prompt appears, provide the Cisco.
The Cisco. In te Overview section, click Next. In the Select Software section, check the software which needs to be upgraded. Click Next once the appropriate versions are selected. The Installation of the images start and the overall progress can be seen as below. Once completed click Finish. In the Results section, check the "Save configuration and reload device now" option.
Click Yes to confirm that you want to proceed with installation. There is no indicator that the new package is being loaded. You will still see the Firepower Chassis Manager at the beginning of the upgrade process.
When the system reboots, you will be logged out. You must wait for the system to come back up before you can log in to the Firepower Chassis Manager. The reboot process takes approximately 20 minutes. After the reboot, you will see the login screen.
When the new package finishes downloading Downloaded state , boot the package. In the show package output, copy the Package-Vers value for the security-pack version number.
The chassis installs the ASA image and reboots. Wait until you see the following messages:. The active unit always owns the active IP address. Connect to the Firepower Chassis Manager on the standby unit. Make the unit that you just upgraded the active unit so that traffic flows to the upgraded unit. Connect to the Firepower Chassis Manager on the former active unit. You need to determine which unit is active and which is standby.
To determine the failover status, look at the ASA prompt; you can configure the ASA prompt to show the failover status and priority primary or secondary , which is useful to determine which unit you are connected to. Alternatively, enter the ASA show failover command to view this unit's status and priority primary or secondary. Specify the URL for the file being imported using one of the following:. View the version number of the new package. Launch ASDM on the primary unit or the unit with failover group 1 active by connecting to the management address in failover group 1.
Connect to the Firepower Chassis Manager on the secondary unit. Make both failover groups active on the secondary unit. Connect to the Firepower Chassis Manager on the primary unit. If the failover groups are configured with the ASA preempt command, they automatically become active on their designated unit after the preempt delay has passed. If the failover groups are not configured with the preempt command, you can return them to active status on their designated units by connecting to the ASA CLI and using the failover active group command.
Show the current boot images configured up to 4 :. The ASA uses the images in the order listed; if the first image is unavailable, the next image is used, and so on. You cannot insert a new image URL at the top of the list; to specify the new image to be first, you must remove any existing entries, and enter the image URLs in the order desired, according to the next steps. Remove any existing boot image configurations so that you can enter the new boot image as your first choice:.
Set the ASA image to boot the one you just uploaded :. Repeat this command for any backup images that you want to use in case this image is unavailable. For example, you can re-enter the images that you previously removed. You can only configure one ASDM image to use, so you do not need to first remove the existing configuration.
The Upgrade Software from Local Computer tool lets you upload an image file from your computer to the flash file system to upgrade the ASA. You can reenable it after the upgrade:. Wait for the upgrade to complete. Reload the standby unit to boot the new image:. Wait for the upgrade to complete, and then connect ASDM back to the active unit.
Perform these steps in the system execution space. Make both failover groups active on the primary unit:. Reload the secondary unit to boot the new image:. Wait for the upgrade to complete, and then connect ASDM back to the primary unit. Wait for the upgrade to complete, and then connect ASDM back to the secondary unit. To upgrade all units in an ASA cluster, perform the following steps. Perform these steps on the control unit. You can configure the ASA prompt to show the cluster unit and state control or data , which is useful to determine which unit you are connected to.
Alternatively, enter the show cluster info command to view each unit's role. You must use the console port; you cannot enable or disable clustering from a remote CLI connection.
Perform these steps in the system execution space for multiple context mode. Copy the ASDM image to all units in the cluster:. If you are not already in global configuration mode, access it now.
Show the current boot images configured up to 4. Note the cluster-pool poolname used. During the upgrade process, never use the cluster master unit command to force a data unit to become control; you can cause network connectivity and cluster stability-related problems.
You must upgrade and reload all data units first, and then continue with this procedure to ensure a smooth transition from the current control unit to a new control unit.
On the control unit, to view member names, enter cluster exec unit? To avoid connection loss and allow traffic to stabilize, wait for each unit to come back up and rejoin the cluster approximately 5 minutes before repeating these steps for the next unit.
To view when a unit rejoins the cluster, enter show cluster info. Connect to the console port of a data unit, and enter global configuration mode. Do not save this configuration; you want clustering to be enabled when you reload. You need to disable clustering to avoid multiple failures and rejoins during the upgrade process; this unit should only rejoin after all of the upgrading and reloading is complete.
Uncheck the Participate in ASA cluster check box. Do not uncheck the Configure ASA cluster settings check box; this action clears all cluster configuration, and also shuts down all interfaces including the management interface to which ASDM is connected. To restore connectivity in this case, you need to access the CLI at the console port. You are prompted to exit ASDM. Click the Reload without saving the running configuration radio button. You do not want to save the configuration; when this unit reloads, you want clustering to be enabled on it.
Wait for 5 minutes for a new control unit to be selected and traffic to stabilize. We recommend manually disabling cluster on the control unit if possible so that a new control unit can be elected as quickly and cleanly as possible.
The main cluster IP address now belongs to the new control unit; this former control unit is still accessible on its individual management IP address. When the former control unit rejoins the cluster, it will be a data unit. The Upgrade Software from Local Computer dialog box appears. Click the All devices in the cluster radio button. Optional In the Flash File System Path field, enter the path to the flash file system or click Browse Flash to find the directory or file in the flash file system.
You must reload all data units first, and then continue with this procedure to ensure a smooth transition from the current control unit to a new control unit. Choose a data unit name from the Device drop-down list. Select the data unit that you want to upgrade, and click Delete.
Access LRP. Manage Smart Account Update your profile information and manage users. Manage account. Access EA Workspace. Manage Entitlements eDelivery, version upgrade, and more management functionality is now available in our new portal. Access MCE. Get started with Smart Licensing. Cisco licensing made easy Learn about licensing, how to purchase, deploy, and manage your software. All Community This category This board. ASA software upgrade recommendation.
I have this problem too. All forum topics Previous Topic Next Topic. Bogdan Nita. Rising star. The current suggested releases for X are: 9. Post Reply. Latest Contents.
0コメント