Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Attention: The Community will be in read-only mode on 12/14/2017 from 12:00 am pacific to 11:30 am.

During this time you will only be able to see content. Other interactions such as posting, replying to questions, or marking content as helpful will be disabled for few hours.

We apologize for the inconvenience while we perform important updates to the Community.

New Member

FWSM Aplication Software Upgrade

I'm getting confused with the procedure on "Upgrading Failover Pairs to a new Minor or Major Relase" on Step 1 where it says "Download the new software to both units". How can I complete this step?. It is my understanding that I need to be on the system execution space if I have multiple contexts, which is my case, in order to perform the upgrade. I can ssh to the Admin Context and move into the system execution space but that will only take care of the active fwsm. which means the standby fwsm will not have the new software loaded and won't have the new IOS after the reboot.

http://www.cisco.com/en/US/docs/security/fwsm/fwsm32/configuration/guide/swcnfg_f.html#wp1042136

Help please.

Thanks

Luis

1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Re: FWSM Aplication Software Upgrade

You should have access to both Active and Standby FWSM, whether it is through the switch "session slot proc 1" or if you SSH to both ip addresses of the fwsm (the active ip address, and the standby ip address).

In your case, you mentioned that you SSH to the active fwsm on the admin context, so you could do the same to the standby fwsm. Your configuration should have 2 ip addresses per interface.

For example:

interface vlan 200

     ip address 1.1.1.1 255.255.255.0 standby 1.1.1.2

So, 1.1.1.2 is the standby ip address that you can SSH to.

2 REPLIES
Cisco Employee

Re: FWSM Aplication Software Upgrade

You should have access to both Active and Standby FWSM, whether it is through the switch "session slot proc 1" or if you SSH to both ip addresses of the fwsm (the active ip address, and the standby ip address).

In your case, you mentioned that you SSH to the active fwsm on the admin context, so you could do the same to the standby fwsm. Your configuration should have 2 ip addresses per interface.

For example:

interface vlan 200

     ip address 1.1.1.1 255.255.255.0 standby 1.1.1.2

So, 1.1.1.2 is the standby ip address that you can SSH to.

New Member

Re: FWSM Aplication Software Upgrade

Hi halijenn,

You are absolutely right. I forgot I had configured that second IP address for the standby. I now understand.

Thanks

220
Views
0
Helpful
2
Replies
CreatePlease to create content