We have to perform an update on a pair of 6500s w/Sup 720 to 12.2(33)SXI4. The 6500s are both installed with FWSMs which are still running the 2.3(3) code, arranged in a failover pair. We're planning to update the FWSMs to v4.0(12) soon but we'd rather not do the two upgrades together during the same change window.
Can anyone confirm whether the pairing of 12.2(33)SXI4 and FWSM 2.3(3) will actually work as an interim step? I know it's not a supported configuration, but we will hopefully only have to live with it for a couple of weeks so we're willing to take that risk providing the FWSM will still pass traffic.
Thanks very much for the quick responses. It looks from the link that the FWSM code itself doesn't matter, as long as the IOS is of a version that recognises the module itself. 2.3(3) is not something we want to stick with, but as long as it works in the short term we've got time to negotiate another outage in January for that piece of work.
On the failover front, I'll be upgrading the two FWSMs from 2.3 to 4.0 at the same time so no worries there.
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
Table of Contents Introduction:This document describes details on how
NAT-T works. Background: ESP encrypts all critical information,
encapsulating the entire inner TCP/UDP datagram within an ESP header.
ESP is an IP protocol in the same sense that TCP an...