Migration ASA 5505 7.1 to New ASA 5505 9.0

[Mohammed Yusuf]

Is it possible to copy running-config from old Firewall ASA 5505 7.1 to new Firewall ASA 5505 9.0 and save it.

Would it work as normal?

or use ASDM to backup and restore on the new ASA?

Thanks,

[vishaw jasrotia]

Hey Yusuf

As in ASA 9.0 ther is change in deployment of NAT configurtation ,  ACL matching as major configuration change.

For the rest of the config you can use copy runn .

Moreover there are configuration migration tools over internet. You can take help off these tools for conversion.

Hope this help you.

Thanks.

[Mohammed Yusuf]

Hi Vishaw,

Which migration tool would help me to perform this migration?

Thanks,

[Karsten Iwen]

A copy of the old config won't work as the syntax won't be migrated to the new commands. If the config is not too complex I would suggest to completely start over and reconfigure the ASA for 9.x from ground up.

To run 9.x it's very likely that you also have to upgrade you ASA with more memory. v8.3+ needs 512 MB RAM.

More on the upgrade:

http://www.cisco.com/c/en/us/td/docs/security/asa/asa83/upgrading/migrating.html

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni