asa_ upgrade a software image using asdm or cli configuration example - cisco systems

5/28/2018 ASA_ Upgrade a Software Image Using ASDM or CLI Configuration Example - Cisco Systems

1/20

Cisco ASA 5500 Series Adaptive Security Appl iances

PIX/ASA: Upgrade a Software Image using ASDM or CLI Configuration Example

ContentsIntroduction

Prerequisites

Requirements Components Used Related Products ConventionsUpgrade a Software Image us ing ASDM 5.x

Upgrade an ASDM Image usin g ASDM 5.x

Upgrade a Softwar e Image with ASDM 6.x

Upgrade an ASDM Image w ith ASDM 6.x

Upgrade a Software Image and ASDM Image using CLI

Verify

Troubleshoot

Cisco Support Community - Featured ConversationsRelated Informatio n

Document ID: 69984

Introduction

This document describes how to upgrade a software image on the Cisco ASA 5500Series Adaptive Security Appliances using the Cisco Adaptive Security DeviceManager (ASDM).

ASDM does not work if you upgrade (or downgrade) the security appliance softwarefrom 7.0 to 7.2 directly or upgrade (or downgrade) the ASDM software from 5.0 to5.2 directly. You need to do it in incremental order.

Example: In order to perform the ASDM software upgrade from 5.0 to 5.2, firstupgrade from 5.0 to 5.1 and then upgrade from 5.1 to 5.2. Likewise, for the securityappliance, first upgrade from 7.0 to 7.1 and then upgrade from 7.1 to 7.2.

Note: If you want to upgrade or downgrade from version 7.1.(x) to 7.2(x) and viceversa, you must follow the steps in this procedure since o lder versions of thesecurity appliance images do not recognize new ASDM images and new securityappliance images do not recognize old ASDM images. Refer to the Upgrading to aNew Software Versionsection of Cisco PIX Security Appliance Release Notes,Version 7.2(2)in order to learn more about the upgrade procedures.

Note: You cannot downgrade the ASA 5550 to a software version earlier than7.1(2). Similarly, you cannot downgrade the ASA 5505 to a software version earlierthan 7.2. Refer to Cisco ASA 5500 Series and PIX 500 Series Security ApplianceHardware and Software Compatibilityfor more information.

Note: In Multicontext mode, you cannot use the copy tftp flash command toupgrade or downgrade the PIX/ASA image in all contexts; it is supported only in theSystem Exec mode.

Prerequisites

Requirements

There are no specific requirements for this document.

Components Used

The information in this document is based on these software and hardwareversions:

Cisco ASA 5500 7.0 and later

Cisco ASDM 5.0 and later

The information in this document was created from the devices in a specific labenvironment. All of the devices used in this document started with a cleared(default) configuration. If your network is live, make sure that you understand thepotential impact of any command.

HOME

SUPPORTPRODUCT SUPPORT

SECURITY

CISCO ASA 5500 SERIESADAPTIVE SECURITYAPPLIANCES

CONFIGURE

CONFIGURATION EXAMPLES ANDTECHNOTES

PIX/ASA: Upgrade a Sof tware

Image using ASDM or CLI

Configuration Example

PIX/ASA: Upgrade a Software Image using ASDM or CLI Configuration ... http://www.cisco.com/en/US/products/ps6120/products_conf

1 de 20 25/10/20


2/20

Related Products

This configuration can also be used with Cisco PIX 500 Series Security ApplianceSoftware Version 7.0 and later.

Conventions

Refer to the Cisco Technical Tips Conventionsfor more information on documentconventions.

Upgrade a Sof tware Image using ASDM 5.x

Complete these steps to upgrade a software image on the ASA 5500 using ASDM.

Select Tools > Upgrade Softwar e...from the Home window of the ASDM.1.

Select the type of image to upload from the drop-down menu.2.

Click Browse Local Files...or type the path in the Local File Path field tospecify the location of the software image on your PC.

3.

Click Browse Flash....

A Browse Flash Dialog window appears with the file name enteredautomatically. If the file name does not appear, enter it manually in the FileName field. Click OKwhen you are done.

4.


2 de 20 25/10/20


3/20

Once both the local and remote f ile names are specified, click UploadImage.

A Status window appears while ASDM writes the image to Flash.

5.


3 de 20 25/10/20


4/20

Once completed, an Information window appears that indicates a successfulupload.

Click OKin the Information window and then Closein the Upload Imagefrom Local PC window.

6.

Choose Configuration > Properties > Device Administration > Boot

Image/Configuration > Editin order to change the boot image location.

Click Browse Flashin order to choose or specify the ASA image file. Thenclick OK.

7.


4 de 20 25/10/20


5/20

Choose File > Save Runnin g Configur ation to Flash in order to store theconfiguration to Flash memory.

8.

Choose Tools > System Reloadfrom the Home window to reload thedevice.

9.

A new window appears that asks you to verify the details of the reload.Select Save the running con figuration at the time of reloadand thenchoose a time to reload.

NowReboot the device immediately.

Delay BySpecify in how many minutes or hours from now to reloadthe device.

Schedule atSpecify a time and date to reload the device.

You can also specify whether or not the device should force a reloadimmediately if a scheduled reload fails. Check On Reload failure, for ce animmediate reload afterand then specify a maximum hold time. This is theamount of time that the security appliance waits to notify other subsystemsbefore a shutdown or reboot. After this time elapses, a quick (forced)shutdown/reboot occurs. Click Schedule Reload.

10.


5 de 20 25/10/20


6/20

Once the reload is in progress, a Reload Status window appears thatindicates that a reload is being performed. An option to exit ASDM is alsoprovided.

Note: Start ASDM again after the ASA reloads.

11.

Upgrade an ASDM Image us ing ASDM 5.x

Complete these steps to upgrade an ASDM image on the ASA 5500 using ASDM.

Choose Tools > Upgrade Software...from the Home window of the ASDM.1.


6 de 20 25/10/20


7/20

Select the type of image to upload from the drop-down menu.2.

Click Browse Local...or type the path in the Local File Path field to specifythe location of the ASDM image on your PC.

3.

Click Browse Flash....

A Browse Flash Dialog window appears with the file name enteredautomatically. If the file name does not appear, enter it manually in the FileName field. Click OKwhen you are done.

4.


7 de 20 25/10/20


8/20

Once both the local and remote f ile names are specified, click Upload

Image.

A Status window appears while ASDM writes the image to Flash.

Once completed, an Information window appears that indicates a successfulupload.

5.


8 de 20 25/10/20


9/20

Click OKin the Information window and then Closein the Upload Imagefrom Local PC window.

6.

Choose Configuration > Properties > Device Administration > BootImage/Configuration in order to change the ASDM image file name in theconfiguration.

Click Browse Flashin order to choose or specify the ASDM image file.Then click OK.

7.

Choose File > Save Runnin g Configur ation to Flash in order to store theconfiguration to Flash memory.

8.


9 de 20 25/10/20


10/20


9.

A new window appears that asks you to verify the details of the reload. ClickSave the running configur ation at the time of reloadand then choose atime to reload.




You can also specify whether or not the device should force a reloadimmediately if a scheduled reload fails. Check On Reload failure, for ce animmediate reload afterand then specify a maximum hold time. This is the

amount of time that the security appliance waits to notify other subsystemsbefore a shutdown or reboot. After this time elapses, a quick (forced)shutdown/reboot occurs. Click Schedule Reload.

10.


10 de 20 25/10/20


11/20

Once the reload is in progress, a Reload Status window appears thatindicates that a reload is being performed. An option to exit ASDM is alsoprovided.

Note: Start ASDM again after the ASA reloads.

11.

Upgrade a Sof tware Image with ASDM 6.xNote:ASDM 6.x is supported only on ASA software image 8.x and later.

Complete these steps to upgrade a sof tware image on the ASA 5500 with ASDM:

Choose Tools > Upgrade Software from Local computer...from theHome window of the ASDM.

1.


11 de 20 25/10/20


12/20

Choose the type of image to upload from the drop-down menu.2.

Click Browse Local Files...or type the path in the Local File Path field tospecify the location of the software image on your PC. The file path in FlashFile Systemis automatically determined and shown. If the file path in Flash

File System is not shown, you can type it manually or click Browse Flashand choose the path.

3.

Once both of the file paths are specified, click Upload Image. A Statuswindow appears while ASDM writes the image to Flash.

4.


12 de 20 25/10/20


13/20

Once completed, an Information window appears that indicates a successfulupload and asks to set this image as boot image. Click Yesif you want thenew image to be set as boot image; otherwise click No.

5.

If you click Yes, it sets the new image as the boot image, and a Informationbox appears. Click OK.

6.


7.

A new window appears that asks you to verify the details of the reload.Choose Save the running con figuration at the time of reload, and then

8.


13 de 20 25/10/20


14/20

choose a time to reload.




You can also specify whether or not the device must force a reloadimmediately if a scheduled reload fails. Check On Reload failure, for ce animmediate reload after, and then specify a maximum hold time. This is theamount of time that the security appliance waits to notify other subsystems

before a shutdown or reboot. After this time elapses, a quick (forced)shutdown/reboot occurs. Click Schedule Reload.

Once the reload is in progress, a Reload Status window appears thatindicates that a reload is being performed. An option to exit ASDM is alsoprovided. Click Exit ASDM, and restart ASDM after the device reloads.

9.


14 de 20 25/10/20


15/20

Upgrade an ASDM Image wi th ASDM 6.x

Note:ASDM 6.x is supported only on ASA software image 8.x and later.

Complete these steps to upgrade an ASDM image on the ASA 5500 with ASDM:

Choose Tools > Upgrade Software from Local Computer...from theHome window of the ASDM.

1.

Choose the type of image to upload from the drop-down menu.2.

Click Browse Local Files...or type the path in the Local File Path field tospecify the location of the ASDM image on your PC. The file path in FlashFile Systemis automatically determined and shown. If the file path in FlashFile System is not shown, you can type it manually or click Browse Flashand choose the path.

3.

Once both of the file paths are specified, click Upload Image. A Statuswindow appears while ASDM writes the image to Flash.

4.


15 de 20 25/10/20


16/20

Once completed, an Information window appears that indicates a successfulupload and asks to set this image as the default an ASDM image. Click Yesif you want the new image to be set as the ASDM image; otherwise click No.

5.

If you chose Yesto use the new image as the ASDM image, an Informationbox appears. Click OK.

6.

Click Saveon top of the window to save the running configuration to Flash.7.

A dialog box appears for your confirmation. ClickApp ly .8.

Click Fileon top of window, and choose Exitto close ASDM.9.


16 de 20 25/10/20


17/20

A dialog box can appear that asks for your confirmation. ClickYes.10.

Run ASDM again to load the new ASDM image.

Refer to this video for more information: How to upgrade the software imageon a Cisco Adaptive Security Appliance(ASA) using Cisco Adaptive SecurityDevice Manager (ASDM)

11.

This video posted to the Cisco Support Community describes how to upgradethe software image on Cisco ASA using ASDM: How to upgrade the software imageon a Cisco Adaptive Security Appliance(ASA) using Cisco Adaptive Security

Device Manager(ASDM)

Upgrade a Software Image and ASDM Image using

CLI

A TFTP server is required to upgrade or downgrade a software image as well as anASDM image for a PIX/ASA. Refer to TFTP Server Selection and Usein order tolearn more about TFTP server selection.

The copy tftp flash command enables you to download a software image into theFlash memory of the firewall via TFTP. You can use the copy tftp flashcommandwith any security appliance model. The image you download is made available to


17 de 20 25/10/20


18/20

the security appliance on the next reload (reboot).

This is the output from the copy tftp flashcommand:

copy tf t p[ : [ [ / / l ocati on] [ / t f tp_pathname] ] ] [ [ f l ash/ di sk0] [ : [ i mage | asdm] ] ]

Note: For ASA, keyword disk0replaces flashin the copycommand.

If the command is used without the location or pathname optional parameters, thenthe location and filename are obtained from the user interactively via a series ofquestions similar to those presented by Cisco IOS software. If you only enter acolon, parameters are taken from the tftp-servercommand settings. If otheroptional parameters are supplied, then these values are used in place of the

corresponding tftp-servercommand setting. If any of the optional parameters,such as a colon and anything after it are supplied, the command runs without aprompt for user input.

The location is either an IP address or a name that resolves to an IP address via thesecurity appliance naming resolution mechanism, which is currently static mappingsvia the nameand names commands. The security appliance must know how toreach this location via its routing table information. This information is determined bythe IP addr ess , the route, or the RIPcommands. This depends on yourconfiguration.

The pathname can include any directory names besides the actual last componentof the path to the file on the server. The pathname cannot contain spaces. If adirectory name has spaces set to the directory in the TFTP server instead of in thecopy tftp flashcommand, and if your TFTP server is configured to point to adirectory on the system from which you download the image, you only need to usethe IP address of the system and the image f ilename. The TFTP server receivesthe command and determines the actual file location from its root directory

information. The server then downloads the TFTP image to the security appliance.

These commands are needed to upgrade the sof tware image as well as the ASDMimage and make it as a boot image at the next reload.

ASA#copy tftp [[flash:/disk0:][software image name/asdm image name]]

!--- Command to set an image as bootup or specify the

!--- ASDM image file.

ASA( conf i g) #boot system [flash:/disk0:]/[software image name]

!--- Save active configuration to the Flash.

ASA#write memory

!--- Reboot the security appliance and load

!--- with the new boot image as per the configuration file.

ASA#reload

Example:

ASA5510#copy tftp disk0:

Address or name of r emote host [ ] ? 172. 16. 31. 1Source fi l ename [ ] ? asa722-k8. bi nDesti nati on fi l ename [ asa722- k8. bi n] ?Accessi ng tf tp:/ / 172. 16. 31. 1/ asa722- k8. bi n. . . !! !! !! !! !! !! !! !! !! !! !! !! !! !! !! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! !! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! !Wri ti ng fi l e di sk0: / asa722- k8. bi n. . .! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! !! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! !! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! !8312832 bytes copi ed i n 163. 350 secs ( 50998 bytes/ sec)

ASA5510#show disk0:- #- - -l ength-- - - - - - date/t i me-- - -- - path

6 5124096 J an 01 2003 00: 06:22 asa702-k8. bi n 7 5623108 Feb 12 2007 00:23:48 asdm-522.bin 10 5539756 Feb 12 2007 00:14:18 asdm- 521. bi n 11 8294400 Dec 07 2006 05: 47:20 asa721-24- k8. bi n 12 6002680 Dec 21 2006 03:58:30 asdm- 52034.bi n 13 8312832 Feb 12 2007 22:46:30 asa722-k8.bin

23949312 bytes avai l abl e (38932480 byt es used)

!--- Command to set "asa722-k8.bin" as the boot image.

ASA5510( conf i g)#boot system disk0:/asa722-k8.bin

!--- Command to set "asdm-522.bin" as the ASDM image.

ASA5510( conf i g)# asdm image disk0:/asdm-522.binASA5510#write memoryASA5510# reload


18 de 20 25/10/20


19/20

Note: When you try to upgrade the image on the ASA from an FTP server, you canuse the copy ftp flashcommand. This command allows you to specify parameters,such as remote IP address and source file name. This procedure is s imilar toTFTP. However, one limitation with is that you can not modify the remote IP/sourceinterface (like you can with TFTP). In TFTP mode, options specified with thetftp-servercommand can be pulled and executed. But with FTP, there is no suchoption. The source interface should always be the outsideby default, which cannotbe modified. That is, the FTP server should be reachable from the outsideinterface.

Verify

Use this section to confirm that your software upgrade was successful.

The Output Interpreter Tool(registeredcustomers only) (OIT) supports certainshowcommands. Use the OIT to view an analysis of showcommand output.

After the ASA reloads and you have successfully logged into ASDM again, you canverify the version of the image that runs on the device. See the General tab on theHome window for this information.

These CLI commands are used in order to verify the upgrade:

Show versionThis shows the current image with which the ASA isbooted.

1.

Show bootvarThis shows the priority of the image to be used afterreload.

2.

Show asdm imageThis shows the current asdm image used by ASA.3.

Troubleshoot

There is currently no specific troubleshooting information available for thisconfiguration.

Cisco Support Community - Featured

Conversations

Cisco Support Communityis a forum for you to ask and answer questions, sharesuggestions, and collaborate with your peers. Below are just some of the mostrecent and relevant conversations happening right now.

Want to see more? Join us by clicking here

Pix to ASA upgrade agent2007 1 Reply 8 months, 2 days ago

Preparation on PIX to ASA Migration? mcbernie11 1 Reply 3 years, 4 months ago


19 de 20 25/10/20


20/20

SubscribeStart A New Discussion

PIX to ASA Upgrade jamesdaniel kir k 1 Reply 2 years, 6 months ago

cisco asa 5505 rameshkonar1 Reply 4 years, 2 months ago

MS Windows Media Server and PIX/ASA... drumrb0y 1 Reply 3 years, 12 months ago

Pix to ASA upgrade question whiteford 3 Replies 3 years, 12 months ago

where to download update for software... ForganConclusion 4 Replies 6 months, 1 week ago

Cisco ASA 5505 upgrade ( ASDM & ASA ) ddugailliez 6 Replies 1 year, 9 months ago

Related Information

Downloading Software or Configuration Files to Flash Memory, Cisco

Security Appliance Command Line Configuration Guide

Cisco ASA 5500 Series Adaptive Security Appliances Product

Support

Cisco Adaptive Security Device Manager Product Support

Cisco PIX Firewall Software

Cisco Secur e PIX Firewall Command References

Security Product Field Notices (including PIX)

TFTP Server Selection and Use

Backup and Restore PIX Configuration Files

Requests for Comm ents (RFCs)

ASA 8.3 Upgr ade - What You Need to Know

Technical Support & Documentation - Cisco Systems

Updated: Aug 21, 2007 Document ID: 69984

Contacts| Feedback | Help | Site Map | Terms & Conditions | Privacy Statement | Cookie Policy | Trademarks

Information For

Small Business

Service Provider

Executives

Home

Contacts

Contact Cisco

Find a Partner

News & Alerts

Newsroom

Blogs

Newsletters

Field Notices

Security Advisories

Technology Trends

Video Architecture

IPv6

Support

Downloads

Documentation

Communities

Collaboration

Developer NetworkLearning Network

Support Community

About Cisco

Investor Relations

Corporate Social Responsibility

Environmental Sustainability

Human Network

Career Opportunities

Offers

Special Offers

Financing Options

Industries


20 d 20 25/10/20

asa_ upgrade a software image using asdm or cli configuration example - cisco systems

Documents

asdm software upgrade

software image

asdm image usin g asdm

asdm image w ith asdm

ing asdm

latercisco asdm

new asdm images

old asdm images