Solved: FWSM Aplication Software Upgrade

lm20ele · ‎04-15-2010

I'm getting confused with the procedure on "Upgrading Failover Pairs to a new Minor or Major Relase" on Step 1 where it says "Download the new software to both units". How can I complete this step?. It is my understanding that I need to be on the system execution space if I have multiple contexts, which is my case, in order to perform the upgrade. I can ssh to the Admin Context and move into the system execution space but that will only take care of the active fwsm. which means the standby fwsm will not have the new software loaded and won't have the new IOS after the reboot.

http://www.cisco.com/en/US/docs/security/fwsm/fwsm32/configuration/guide/swcnfg_f.html#wp1042136

Help please.

Thanks

Luis

Jennifer Halim · ‎04-15-2010

You should have access to both Active and Standby FWSM, whether it is through the switch "session slot proc 1" or if you SSH to both ip addresses of the fwsm (the active ip address, and the standby ip address).

In your case, you mentioned that you SSH to the active fwsm on the admin context, so you could do the same to the standby fwsm. Your configuration should have 2 ip addresses per interface.

For example:

interface vlan 200

ip address 1.1.1.1 255.255.255.0 standby 1.1.1.2

So, 1.1.1.2 is the standby ip address that you can SSH to.

View solution in original post

Jennifer Halim · ‎04-15-2010