[c-nsp] FWSM upgrade

John Snow john.snow at sait.ca
Thu Mar 31 14:29:29 EDT 2011


Hi I am fairly new to fwsm, but what I need to do is upgrade from 3.1 to a 3.2 release.

I don't have a spare blade to test this on so I will be upgrading on prod on the fly. I am putting a plan together before I make the change to avoid as much downtime as possible.


I would like to boot into cf:5, load the image and config, make sure everything is working as expected and then either load new image and config into cf:4 or copy the image and config from cf:5 into cf:4 and then boot from cf:4 again.



1.       Configure vlan1 on msfc

interface Vlan1
 description **in shutdown mode normally** li1  ten-193-9  10.193.9.0 /24   rsvd fwsm rom-boot cf:1 vlan 1 ip gw -> ftp relay.sait
 ip address 10.193.9.254 255.255.255.0
end


2.        Boot into maintenance partition

#hw-module module 9 reset cf:1


3.       Console session into fw

sess slot 9 proc 1


4.       Configure ip address/sm/gw

root at localhost.localdomain#ip<mailto:root at localhost.localdomain#ip> address 10.193.9.1 255.255.255.0
root at localhost.localdomain#ip<mailto:root at localhost.localdomain#ip> gateway 10.193.9.254

make sure I can ping ftp server

root at localhost.localdomain#ping<mailto:root at localhost.localdomain#ping> 142.110.254.131



5.       ftp image into flash cf:5 partition
root at localhost.localdomain#upgrade<mailto:root at localhost.localdomain#upgrade> ftp://user:pw@142.110.254.131/C6SVC-FWM-K9-3-1-1.BIN cf:5

Application image upgrade complete. You can boot the image now.
root at localhost.localdomain#exit<mailto:root at localhost.localdomain#exit>


6.       boot into cf:5
#hw-module module 9 reset cf:5


7.       load avtivation key

FWSM(config)# activation-key df9f1b5a 38203d9f 1a65ca81 3920ba83



Now at this point I have an image in cf:5, but no configuration yet.  This is where I am a bit stuck. I need to load/copy image into cf:5 - test - then move the image and config back into cf:4.


Any help would be appreciated.





More information about the cisco-nsp mailing list