{"id":870,"date":"2019-02-26T07:06:53","date_gmt":"2019-02-26T07:06:53","guid":{"rendered":"http:\/\/www.balajibandi.com\/?p=870"},"modified":"2019-04-26T07:10:20","modified_gmt":"2019-04-26T06:10:20","slug":"asa-os-upgrade-active-standby","status":"publish","type":"post","link":"https:\/\/www.balajibandi.com\/?p=870","title":{"rendered":"ASA  OS Upgrade Active\/Standby"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">ASA 5585X Cluster \/ Multi Context<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Pre-reqs<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">1) Config Backup <br>\n&#8220;more system:running-config&#8221;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">HA Active\/Standby<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">1) Check the upgrade path on the release notes of the new version for the ASA model. <br> 2) {9.4(2)11} -&gt; {9.8(3)18}<br> 3) Note the MD5 hash for all versions<br> <br> 4) (Optional) Make sure the current ASDM version is compatible with the new ASA version, if required upgrade<br> &#8220;conf t<br> asdm image disk0:\/{asdm-792-152.bin}<br> end<br> wr&#8221;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><br> 5) Note which device is Primary\/Secondary and which is Active\/Standby<br> &#8220;show failover&#8221;<br><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">6) Upload the all required images to both ASAs,<br> &#8220;copy {Source}:\/{asa983-18-smp-k8.bin} disk0:\/&#8221;<br> Repeat for all versions<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><br> 7) Verify the Images are not corrupt on both ASAs,<br> &#8220;verify \/md5 disk0:\/{asa983-18-smp-k8.bin}&#8221;<br> Compare with Md5 Hash on Cisco&#8217;s website noted in Step 3<br> Repeat for all versions<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><br> 8) Verify both ASAs have all the required files uploaded, including the ASDM and AnyConnect images<br> &#8220;dir&#8221; <\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><br> 9) Check which image is currently being used on the Active ASA<br> &#8220;show boot&#8221;<br> &#8220;show run | inc boot&#8221;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><br> 10) Remove any images referenced in the running config on the Active ASA<br> &#8220;conf t<br> no boot system image disk0:\/{asa942-11-smp-k8.bin}<br> end&#8221;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><br> 11) Change the boot variable to point to the desired image and save the config<br> &#8220;conf t<br> boot system image disk0:\/{asa983-18-smp-k8.bin} <br> end<br> wr&#8221;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><br> 11a) If &#8220;Primary\/Active and Seconday\/Standby&#8221; follow Step 11, if &#8220;Secondary\/Active and Primary\/Standby&#8221; follow Step 12<br> 11a) Primary\/Active and Seconday\/Standby<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>On the Active ASA *<br>\n&#8220;failover reload-standby&#8221;<br>\n11b) Wait for the Standby ASA to come back online, once online verify it has been upgraded<\/li><li>On Active ASA * <br>\n&#8220;failover exec standby show version&#8221;<br>\n11c) Fail over services to Secondary ASA<\/li><li>On Active ASA *<br>\n&#8220;no failover active&#8221;<br>\nVerify the Secondary ASA is now Active<br>\n&#8220;show failover&#8221;<br>\n11d) Upgrade the Primary\/Standby ASA<\/li><li>On the Active ASA *<br>\n&#8220;failover reload-standby&#8221;<br>\n11e) Wait for the Standby ASA to come back online, once online verify it has been upgraded<\/li><li>On Active ASA * <br>\n&#8220;failover exec standby show version&#8221;<br>\n11f) Failback over services to Primary ASA<\/li><li>On Active ASA *<br>\n&#8220;no failover active&#8221;<br>\n12a) Secondary\/Active and Primary\/Standby<\/li><li>On the Active ASA *<br>\n&#8220;failover reload-standby&#8221;<br>\n12b) Wait for the Standby ASA to come back online, once online verify it has been upgraded<\/li><li>On Active ASA * <br>\n&#8220;failover exec standby show version&#8221;<br>\n12c) Fail over services to Primary ASA<\/li><li>On Active ASA *<br>\n&#8220;no failover active&#8221;<br>\nVerify the Primary ASA is now Active<br>\n&#8220;show failover&#8221;<br>\n12d) Upgrade the Secondary\/Standby ASA<\/li><li>On the Active ASA *<br>\n&#8220;failover reload-standby&#8221;<br>\n12e) Wait for the Standby ASA to come back online, once online verify it has been upgraded<\/li><li>On Active ASA * <br>\n&#8220;failover exec standby show version&#8221;<br>\n12f) Failback over services to Secondary ASA<\/li><li>On Active ASA *<br>\n&#8220;no failover active&#8221;<br>\n13) Repeat the steps 9, 10 and 11 or 9, 10 and 12 until the ASAs are on the desired version<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>ASA 5585X Cluster \/ Multi Context Pre-reqs 1) Config Backup &#8220;more system:running-config&#8221; HA Active\/Standby 1) Check the upgrade path on the release notes of the new version for the ASA model. 2) {9.4(2)11} -&gt; {9.8(3)18} 3) Note the MD5 hash for all versions 4) (Optional) Make sure the current ASDM version is compatible with the [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[11,2],"tags":[],"class_list":["post-870","post","type-post","status-publish","format-standard","hentry","category-ccie-sec","category-cisco"],"_links":{"self":[{"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=\/wp\/v2\/posts\/870","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=870"}],"version-history":[{"count":2,"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=\/wp\/v2\/posts\/870\/revisions"}],"predecessor-version":[{"id":872,"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=\/wp\/v2\/posts\/870\/revisions\/872"}],"wp:attachment":[{"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=870"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=870"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=870"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}