Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

How to upgrade the fwsm image from 3.1(10) to 4.0(8).


Hi all,

I need to upgrade the fwsm image from 3.1(10) to 4.0(8). Can i do it directly from 3.1(10) to 4.0(8) ?

Do i need to upgrade other image also along with Firewall version 4.0(8)?


FWSM# sh ver

FWSM Firewall Version 3.1(10)

Device Manager Version 6.1(5)F

Compiled on Mon 21-Apr-08 17:43 by fwsmbld

FWSM up 2 days 15 hours

failover cluster up 2 days 15 hours

Hardware: WS-SVC-FWM-1, 1024 MB RAM, CPU Pentium III 1000 MHz

Flash STI Flash 8.0.0 @ 0xc321, 20MB

0: Int: Not licensed : irq 5

1: Int: Not licensed : irq 7

2: Int: Not licensed : irq 11

The Running Activation Key is not set, using default settings:

Licensed features for this platform:

Maximum Interfaces : 256

Inside Hosts : Unlimited

Failover : Active/Active

VPN-DES : Enabled

VPN-3DES-AES : Enabled

Cut-through Proxy : Enabled

Guards : Enabled

URL Filtering : Enabled

Security Contexts : 2

GTP/GPRS : Disabled

VPN Peers : Unlimited

Serial Number: SAD125004FT

Running Activation Key: 0x00000000 0x00000000 0x00000000 0x00000000

Configuration last modified by enable_15 at 18:58:52.627 IST Mon Jan

11

2010

Regards

Madhu

5 REPLIES
Cisco Employee

Re: How to upgrade the fwsm image from 3.1(10) to 4.0(8).

Yes, you can upgrade from 3.1 to 4.0.

Make sure you have downtime though and if you have failover that the FWSMs are not running 3.1 and 4.0 at the same time.

I hope it helps.

PK

Cisco Employee

Re: How to upgrade the fwsm image from 3.1(10) to 4.0(8).

Madhu,

If this is a failover pair then pls. follow this link.  zero downtime upgarde is not supported when doing a major upgrade.

once you get the code onto the blades "copy tftp flash:image" you can follow this link:

http://www.cisco.com/en/US/docs/security/fwsm/fwsm40/configuration/guide/swcnfg_f.html#wp1064232

You already have the latest ASDM so, no need to upgrade that.

-KS

New Member

Re: How to upgrade the fwsm image from 3.1(10) to 4.0(8).

Hi,

Is it application partition or maintainance partion where we need to upgrade the image from 3.1(10) to 4.0.8.

Reagrds

madhu

Cisco Employee

Re: How to upgrade the fwsm image from 3.1(10) to 4.0(8).

Application partitiion is what you will be upgrading from 3.1.(10 to 4.0(8).

MP - maintenance partition is supposed to be 2.1.2 or above which is the same requirement for 3.1.x so, you will be good there.

Pls. check the compatibility with the swtich code in this 4.0.8 Release Note link:

http://www.cisco.com/en/US/docs/security/fwsm/fwsm40/release/notes/fwsmrn40.html

Pls. check the chassis system requirement in the above link.

commands you will need are:

copy tftp flash:image

copy tftp flash:asdm

falsh:image for OS and flash:asdm if you will be upgrading the asdm as well.

-KS

New Member

How to upgrade the fwsm image from 3.1(10) to 4.0(8).

Hello KS,

in the upgrade from 3.1 to 4.0.x, the nat-control feature is mantained?

Thank you.


Best regards,

Norberto

3947
Views
10
Helpful
5
Replies