ASA Upgrade - Different Ways to load files to Flash

Document

Jun 11, 2014 10:08 AM
Aug 18th, 2010

Table of Contents 

Introduction:

This document describes the different methods of uploading new IOS in ASA.
 
Scenario 1

Upgrading an ASA from FTP:

copy ftp://[username[:password]@]<SERVER>[/path]/filename {flash:/ | disk0:/ | disk1:/}[path/]filename

Example:

copy ftp://pshanubh:*********@10.250.0.11/asa803-19-k8.bin disk0:/asa803-19-k8.bin

Upgrading an ASA from HTTPS:

copy http[s]://[username[:password]@]<SERVER>[:port][/path]/filename {flash:/ | disk0:/ | disk1:/ }[path/]filename

Example:

copy http://pshanubh:********@10.250.0.11:80/asa803-19-k8.bin disk0:/asa803-19-k8.bin

 

Upgrading an ASA from SSh/SCP:

 

--> Enable SCP on the ASA
    To use the SCP method, you must first enable it on the firewall:
        hostname(config)# ssh scopy enable

 

--> Copying files to the ASA
    From a Unix/Linux host with OpenSSH or Tectia SSH installed:
    Enter the following command:
      scp –v <filename> username@asa_address
     
      Ex:
      scp –v asa803-19-k8.bin pshanubh@10.88.9.1

 

Scenario 2:

User planning to migrate his ASA 5520 from 8.2 to 8.3 and we need help to finalize this issue because currently a lot of services running on firewall like:

  • SSL-VPN connections
  • Site-To-Site VPN connections
  • NATing,  Access-lists 
  • Internet service

Solution:

There are literally dozens of documents on this site and Cisco's ASA Product Support page (plus many other sites) that address the upgrade procedure and considerations you should be aware of.

Please start with  the following:

https://supportforums.cisco.com/document/48646/asa-83-upgrade-what-you-need-know

https://supportforums.cisco.com/document/33921/asa-pre-83-83-nat-configuration-examples

https://supportforums.cisco.com/document/132066/asa-nat-83-nat-operation-and-configuration-format-cli

Overall Rating: 3 (1 ratings)
sonybabu2k1 Fri, 08/20/2010 - 05:23

sonybabu2k1 Sat, 08/21/2010 - 01:24

jtmajorx5 Sat, 12/21/2013 - 16:19

So, this is what I got

FW# show run ssh

ssh scopy enable

ssh 0.0.0.0 0.0.0.0 INSIDE

When I try to copy with PSCP I get the following:

D:\Users\jmajor\Documents>pscp.exe -2 -scp -pw ***** anyconnect-win-3.0.10057

-k9.pkg username@x.x.x.x:anyconnect-win-3.0.10057-k9.pkg

Fatal: Received unexpected end-of-file from server

Actions

Login or Register to take actions

This Document

Posted August 18, 2010 at 7:05 AM
Updated June 11, 2014 at 10:08 AM
Stats:
Comments:4 Overall Rating:3
Views:11215 Contributors:3
Shares:0
Tags: asa, tac
+

Related Content

 

Documents Leaderboard

Rank Username Points
1
Jouni Forss
100
2
TCC_2
74
3
Julio Carvajal
40
4
golly_wog
25
5
PAWS
19