Cisco Cisco ASA 5525-X Adaptive Security Appliance - No Payload Encryption Manual Técnica

Descargar
Página de 18
Note: Cisco has released the PIX to ASA Migration tool in order to help automate the process of
migrating to the new ASA appliances. This tool can be downloaded from the PIX Software
download site. Refer to 
 for more information.
Prerequisites
Hardware and Software Requirements
You can upgrade PIX 515, 515E, 525, 535 to version 7.0.
Before you start the upgrade process to version 7.x, Cisco recommends that the PIX run version
6.2 or later. This ensures that the current configuration properly converts. In addition, these
hardware requirements must be met for minimum RAM requirements:
PIX Model RAM Requirements
 
Restricted (R) UnRestricted (UR) / Failover Only (FO)
PIX-515
64 MB*
128 MB*
PIX-515 E 64 MB*
128 MB*
PIX-525
128 MB
256 MB
PIX-535
512 MB
1 GB
Issue the show version command in order to determine the amount of RAM currently installed on
the PIX.
Note: PIX 515 and 515E software upgrades can require a memory upgrade as well:
Those with restricted licenses and 32 MB of memory must be upgraded to 64 MB of memory.
Those with unrestricted licenses and 64 MB of memory must be upgraded to 128 MB of
memory.
See this table for the part numbers you need in order to upgrade the memory on these appliances.
Current Appliance Configuration
Upgrade Solution
Platform License
Total Memory (before upgrade) Part Number
Total Memory (after upgrade)
Restricted (R)
32 MB
PIX-515-MEM-32= 64 MB
Unrestricted (UR) 32 MB
PIX-515-MEM-128= 128 MB
Failover-Only (FO) 64 MB
PIX-515-MEM-128= 128 MB
Note: The part number depends upon the license installed on the PIX.
The upgrade of software version 6.x to 7.x is seamless and requires some manual work, but these
steps must be completed before you begin:
Ensure you have no conduit or outbound/apply commands in your current configuration.
These commands are no longer supported in 7.x and the upgrade process removes them.
Use the 
 tool in order to convert these commands to access-lists before
you attempt the upgrade.
1.
Ensure that PIX does not terminate Point to Point Tunneling Protocol (PPTP) connections.
Software version 7.x currently does not support PPTP termination.
2.
Copy any digital certificates for VPN connections on the PIX before you start the upgrade
process.
3.