ASA Upgrade Train 7.2.3 to 8.0.4

Unanswered Question
Aug 13th, 2008

Can this be done with zero downtime procedure? Or do I need to go to 7.2.4 then 8.0.2 then 8.0.4. Thanks.

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
JORGE RODRIGUEZ Wed, 08/13/2008 - 10:02

This is new released code, probably released this week, your best bet to be sure is ask TAC, however, generally there is a zero downtime upgrade gideline.

This is the zero downtime upgrade guidelines

http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/mswlicfg.html#wp1053398

There is still and opened CAVEATS related to failover upgrade but it may not apply to you.

ISAKMP SA are not replicated when the standby unit is running 8.0.3.12 and the active unit 7.2.3.x. This is preventing a 0 downtime upgrade

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCso95135

Read the release notes 8.0.4

http://www.cisco.com/en/US/docs/security/asa/asa80/release/notes/arn804n.html

jasonmcl Wed, 08/13/2008 - 10:09

Thanks for the quick reply. I have of course already looked at the upgrade guidelines you have linked in your reply. It seem reasonable based on those guidelines that since we are going from last minor (7.2.x) to the next major (8.0.x) that the process should work. Whis is unclear to me is if the maint. relese ( x.x.3 or x.x.4 etc) is also a dependancy. I didnt see that clarified anywhere on here. Has anyone asked this already and gotten an answer from TAC?

pmjordan Wed, 10/15/2008 - 08:06

I posed this precise question to our Cisco support people. Their response was "consensus of opinion is possibly but no one can guarantee...not proven until tested in your particular environment."

Actions

This Discussion