Cisco Cisco ASA 5515-X Adaptive Security Appliance - No Payload Encryption 技术手册
Error Message
When you upgrade with the copy tftp flash method, you see this error message:
pixfirewall#copy tftp flash
Address or name of remote host [0.0.0.0]? 172.18.173.123
Source file name [cdisk]? pix701.bin
copying tftp://172.18.173.123/pix701.bin to flash:image
[yes|no|again]? y
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Received 5124096 bytes
Erasing current image
Insufficient flash space available for this request:
Size info: request:5066808 current:1966136 delta:3100672 free:2752512
Image not installed
pixfirewall#
This message typically appears when the PIX 515 or a PIX 535 with PDM already installed is
upgraded with the copy tftp flash method.
upgraded with the copy tftp flash method.
Upgrade with the Monitor Mode method in order to resolve this.
Configuration Does Not Seem Correct
After you upgrade the PIX from 6.x to 7.x, some of the configuration does not properly migrate.
The output of the show startup-config errors command shows any errors that occurred during
the migration of the configuration. The errors appear in this output after you boot the PIX for the
first time. Examine these errors and attempt to resolve them.
the migration of the configuration. The errors appear in this output after you boot the PIX for the
first time. Examine these errors and attempt to resolve them.
Some Services Such as FTP Do Not Work
Occasionally, some services such as FTP do not work after an upgrade.
The inspection for these services are not enabled after the upgrade. Enable the inspection for the
appropriate services. In order to do this, add them to default/global inspection policy or create a
separate inspection policy for the desired service.
appropriate services. In order to do this, add them to default/global inspection policy or create a
separate inspection policy for the desired service.
Refer to the "Applying Application Layer Protocol Inspection" section of
Unable to Access Internet when the Cisco PIX Security Appliance is Replaced
with the Cisco Adaptive Security Appliance (ASA)
with the Cisco Adaptive Security Appliance (ASA)
Use this section if you are unable to access the Internet after you replace the Cisco PIX Security
Appliance with the Cisco Adaptive Security Appliance (ASA).
Appliance with the Cisco Adaptive Security Appliance (ASA).
When you unplug the PIX from the network and attach the ASA on the network with an Outside
interface IP address that is the same as the Outside interface of the PIX, the upstream router still
has the mac-address for the PIX corresponding to the Outside interface IP Address. As a
result, it is not able to send the reply packets back to the ASA. In order for the ASA to work, you
must clear the ARP entry on the upstream router so that it learns the new/correct mac-address
entry. If you flush out the ARP entries when you plan to replace the PIX with ASA, it resolves the
interface IP address that is the same as the Outside interface of the PIX, the upstream router still
has the mac-address for the PIX corresponding to the Outside interface IP Address. As a
result, it is not able to send the reply packets back to the ASA. In order for the ASA to work, you
must clear the ARP entry on the upstream router so that it learns the new/correct mac-address
entry. If you flush out the ARP entries when you plan to replace the PIX with ASA, it resolves the