Upgrade the Software Image on the Adaptive Security Appliance. Introduction. Requirements

Transcription

1 Cisco Profile Contacts & Feedback Help Cisco SMB Support Assistant Upgrade the Software Image on the ASA 5500 and PIX 500 Series Security Appliances using ASDM Home > Work With My Security Devices > Cisco Security Appliances > Upgrade the Software Image on the ASA 5500 and PIX 500 Series Security Appliances using ASDM Service Requests Upgrade the Software Image on the Adaptive Security Appliance Introduction Requirements Upgrade the Software Image on the Adaptive Security Appliance Connect to the ASA Upload the ASA Software Image Upload the Adaptive Security Device Manager Image Configure the ASA to Boot with the New Software Image Configure the ASA to Boot with the New ASDM Image Reload the ASA Next Step Troubleshoot the Procedure Related Information Introduction Download PDF Upgrade the Software Image on the ASA 5500 and PIX 500 Series Security Appliances using ASDM Open a service request Update a service request Feedback Please rate this site: / Suggestions for improvement: If Cisco may contact you for more details or for future feedback opportunities, please enter your contact information: This document describes how to upgrade your Cisco 5500 Series Adaptive Security Appliances and PIX 500 series Security Appliances to a new OS software version and ASDM software version. Back to Top Full Name: Requirements To perform the steps described in this document, you need to have these items: (1 of 15)11/22/2007 1:13:02 PM

2 A straight-through Ethernet cable to connect the ASA/PIX to a Windows PC. TFTP server software on the PC. Note: If your PC does not have TFTP server software installed, refer to Set Up a TFTP Server for instructions. A new software image for ASA/PIX provided to you by the SMB Technical Assistance Center (SMB TAC). A new software image for ASDM provided to you by the SMB Technical Assistance Center (SMB TAC). Approximately one hour of network downtime. Back to Top Upgrade the Software Image on the Adaptive Security Appliance Follow these steps to upgrade the software image on the ASA Security Appliance: Note: This configuration procedure can also be used with Cisco PIX 500 Series Security Appliance. Connect to the ASA Follow these steps to connect to the ASA: 1. If you have an ASA 5505, connect your PC Ethernet interface to the port 1 of ASA with a straight-through Ethernet cable. If you have an ASA 5510, connect your PC Ethernet interface to the Management port of ASA with a straight-through Ethernet cable. 2. Configure your PC with an IP address that is on the same subnet as the ASA. Refer to Configure an IP Address on Your PC for instructions on how to change the Internet settings of your PC. 3. Place the software image files in the C:\TFTP-Root directory. 4. Launch your TFTP server program. 5. Open a browser window on the PC and enter the IP address of the ASA in the Address field to launch ASDM. Refer to field L6A of your LAN Addressing Worksheet. For more information on how to launch ASDM, refer to Connect with ASDM. Upload the ASA Software Image Follow these steps to upload the new software image on the ASA: (2 of 15)11/22/2007 1:13:02 PM

3 Note: ASDM does not work if you upgrade (or downgrade) the security appliance software from 7.0 to 7.2 directly or upgrade (or downgrade) the ASDM software from 5.0 to 5.2 directly. You need to do it in incremental order. For example, in order to perform the ASDM software upgrade from 5.0 to 5.2, first upgrade from 5.0 to 5.1 and then upgrade from 5.1 to 5.2. Likewise, for the security appliance, first upgrade from 7.0 to 7.1 and then upgrade from 7.1 to 7.2. For further assistance, contact the SMB TAC. 1. Click Tools > Upgrade Software. 2. In the Upgrade Software window, follow these steps: Image to upload: Choose ASA. Local File Path: Click Browse Local, and select the ASA image stored in the TFTP directory of your PC. Flash File System Path: Click Browse Flash, and select the location in the Flash file system where you want to store the new ASA image. (3 of 15)11/22/2007 1:13:02 PM

4 Click Upload Image. 3. When the software upgrade completes, an Information dialog box appears to indicate whether the upgrade was successful or not. Click OK. 4. Click Close. Upload the Adaptive Security Device Manager Image Follow these steps to upgrade your ASA to the new version of Adaptive Security Device Manager (ASDM): 1. Click Tools > Upgrade Software. 2. In the Upload Image from Local PC window, follow these steps: Image to upload: Choose ASDM. (4 of 15)11/22/2007 1:13:02 PM

5 Local File Path: Click Browse Local, and select the ASDM image stored in the TFTP directory of your PC. Flash File System Path: Click Browse Flash, and select the location in Flash file system where you want to store the new ASDM image. Click Upload Image. 3. Click OK in the Information dialog box that appears. 4. Click Close. Configure the ASA to Boot with the New Software Image Follow these steps to configure the ASA to boot with the new software image: 1. Click Configuration. 2. Click Device Administration. (5 of 15)11/22/2007 1:13:02 PM

6 3. Click Device Administration > Boot Image/Configuration. 4. In the Boot Image/Configuration window, click Add. (6 of 15)11/22/2007 1:13:02 PM

7 Note: If the Boot/Image configuration window displays any image files, click Delete to delete the image files, and then click Add. 5. In the Add Boot Image window, click Browse Flash. (7 of 15)11/22/2007 1:13:02 PM

8 6. In the Browse Flash Dialog window, choose the new software image that you uploaded in Flash memory. (8 of 15)11/22/2007 1:13:02 PM

9 7. In the Add Boot Image window, click OK. 8. Click Apply. (9 of 15)11/22/2007 1:13:02 PM

10 Configure the ASA to Boot with the New ASDM Image Follow these steps to configure the ASA to boot with the new ASDM image: 1. In the Boot Image/Configuration window, click the Browse Flash button in the ASDM Image Configuration area. (10 of 15)11/22/2007 1:13:02 PM

11 2. In the Browse Flash Dialog window, choose the new software image that you have uploaded in the Flash memory. (11 of 15)11/22/2007 1:13:02 PM

12 3. Click OK. 4. Click Apply. Reload the ASA Follow these steps to save the new configuration and reload the ASA: 1. Click Save to save your configuration. 2. Click Tools > System Reload. (12 of 15)11/22/2007 1:13:02 PM

13 3. In the System Reload window, click Schedule Reload. (13 of 15)11/22/2007 1:13:02 PM

14 4. In the Confirm Schedule Reload window, click Yes. Note: If the upgrade is not successful, repeat the upgrade procedure. If you are still unable to upgrade the software image, contact the SMB Technical Assistance Center (SMB TAC) for assistance. Back to Top Next Step You have upgraded the software on your Adaptive Security Appliance. To make further changes to the ASA, refer to the Security Appliance Support Page. Back to Top Troubleshoot the Procedure This section provides information about common problems that you may encounter. If this information does not solve your problem, contact the SMB Technical Assistance Center (SMB TAC) for assistance. (14 of 15)11/22/2007 1:13:02 PM

15 Problem Cause(s) and Suggested Solution(s) You are unable to connect to the ASA with ASDM. Make sure you type the correct IP address for the ASA in your PC browser. Ensure that the IP address of the PC matches the IP address of the ASA. See Upgrade the Software Image for further instructions. You receive a message that the upgrade was not successful. If you are connected to the ASA, repeat the steps in Connect to the ASA. If you are still unable to complete the procedure successfully, contact the SMB TAC for assistance. Back to Top Related Information Configure Your ASA 5505 Security Appliance Configure Your ASA 5510 Security Appliance Security Support Page Set Up a TFTP Server Cisco Systems, Inc. All rights reserved. Terms and Conditions, Privacy Statement, Cookie Policy and Trademarks of Cisco Systems, Inc. (15 of 15)11/22/2007 1:13:02 PM