Cisco Cisco ASA 5512-X Adaptive Security Appliance - No Payload Encryption 설치 가이드
2
Upgrade to ASA 8.4 and ASDM 6.4
MASTER FILES
Upgrading the Software
Configuration Migration
Depending on your current version, you might experience one or more configuration migrations when
you upgrade. For example, when upgrading from 8.0 to 8.4, you will experience all of these migrations.
Configuration migration might affect your ability to downgrade, so be sure to back up your current
configuration.
you upgrade. For example, when upgrading from 8.0 to 8.4, you will experience all of these migrations.
Configuration migration might affect your ability to downgrade, so be sure to back up your current
configuration.
•
8.2—See the
•
8.3—See the
•
8.4—See
Configuration Migration in 8.4
•
Configuration Migration for Transparent Mode—In 8.4, all transparent mode interfaces now belong
to a bridge group. When you upgrade to 8.4, the existing two interfaces are placed in bridge group
1, and the management IP address is assigned to the Bridge Group Virtual Interface (BVI). The
functionality remains the same when using one bridge group. You can now take advantage of the
bridge group feature to configure up to four interfaces per bridge group and to create up to eight
bridge groups in single mode or per context.
to a bridge group. When you upgrade to 8.4, the existing two interfaces are placed in bridge group
1, and the management IP address is assigned to the Bridge Group Virtual Interface (BVI). The
functionality remains the same when using one bridge group. You can now take advantage of the
bridge group feature to configure up to four interfaces per bridge group and to create up to eight
bridge groups in single mode or per context.
Note
Note In 8.3 and earlier, as an unsupported configuration, you could configure a management
interface without an IP address, and you could access the interface using the device
management address. In 8.4, the device management address is assigned to the BVI, and the
management interface is no longer accessible using that IP address; the management
interface requires its own IP address.
interface without an IP address, and you could access the interface using the device
management address. In 8.4, the device management address is assigned to the BVI, and the
management interface is no longer accessible using that IP address; the management
interface requires its own IP address.
•
When upgrading to 8.4(2) from 8.3(1), 8.3(2), and 8.4(1), all identity NAT configurations will now
include the no-proxy-arp and route-lookup keywords, to maintain existing functionality. The
unidirectional keyword is removed.
include the no-proxy-arp and route-lookup keywords, to maintain existing functionality. The
unidirectional keyword is removed.
View Your Current Version
(CLI) Use the show version command to verify the software version of your ASA. (ASDM) The software
version appears on the ASDM home page; view the home page to verify the software version of your ASA.
version appears on the ASDM home page; view the home page to verify the software version of your ASA.
Download the Software from Cisco.com
If you are using the ASDM Upgrade Wizard, you do not have to pre-download the software. If you are
manually upgrading, for example for a failover upgrade, download the images to your local computer.
manually upgrading, for example for a failover upgrade, download the images to your local computer.
If you have a Cisco.com login, you can obtain the OS and ASDM images from the following website:
(CLI) This procedure assumes you put the images on a TFTP server, although other server types are
supported.
supported.