[c-nsp] FWSM Maintenance software - where to download from

Erik Sundberg ESundberg at nitelusa.com
Wed Feb 6 23:46:56 EST 2013


Just going to share the process that I used to upgrade the Maintenance Partition, FWSM, and ASDM software...  Took me a while to follow all the cisco doc's...

FWSM is in slot 9 of a Cisco 6509e with SUP720-3BXL running s72033-advipservicesk9_wan-mz.122-33.SXH8b.bin
FTP SERVER is 192.168.0.10

ASDM File: asdm-623f.bin
FW Image: c6svc-fwm-k9.4-1-11.bin
Management Partition: c6svc-mp.2-1-5.gz

I upgrade this on 2/6/2013 current software at this time. Product is EOL by the way...

FWSM UPGRADE
---------------------

Upgrade Maintenance Partition
---------------------------------------

Download software

FWSM# upgrade-mp http://192.168.0.10/fwsm/c6svc-mp.2-1-5.gz

copying http://192.168.0.10/fwsm/c6svc-mp.2-1-5.gz to image
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Received 12259010 bytes.
Image download complete.
Bytes written = 16891904
FWSM#

Upgrade FWSM Firewall software using Maintenance Partition
----------------------------------------------------------------------------

Reload to use the new maintenance software to upgrade the OS...

Note: when you use the maintenance software to upgrade the OS it will format the partition with the Firewall Software and the Config files will be erased. Back'em up

SW1#hw-module module 9 reset cf:1
Device BOOT variable for reset = <cf:1>
Warning: Device list is not verified.

Proceed with reload of module?[confirm]
% reset issued for module 9

SW1#show mod 9
Mod Ports Card Type                              Model              Serial No.
--- ----- -------------------------------------- ------------------ -----------
  9    6  Firewall Module                        WS-SVC-FWM-1       SADMYSERIAL

Mod MAC addresses                       Hw    Fw           Sw           Status
--- ---------------------------------- ------ ------------ ------------ -------
  9  0018.19ed.ea08 to 0018.19ed.ea0f   4.0   7.2(1)       8.7(0.22)BUB Other

Mod  Online Diag Status
---- -------------------
  9  Unknown


SW1#session slot 9 processor 1
The default escape character is Ctrl-^, then x.
You can also type 'exit' at the remote prompt to end the session
Trying 127.0.0.91 ... Open

Cisco Maintenance image

login: root
Password:

!NOTE: USER: root PASSWORD: cisco
!Maintenance Partition software only runs when you boot in to this software to upgrade... So the password doesn't matter.
!NOE: Partition Manages only works on VLAN 1

Maintenance image version: 2.1(5)

root at localhost.localdomain#ip address 192.168.3.2 255.255.255.0
root at localhost.localdomain#ip gateway 192.168.3.1
root at localhost.localdomain#ip nameserver 207.200.200.10 64.237.112.10
root at localhost.localdomain#ip broadcast 192.168.3.255
root at localhost.localdomain#show ip

IP address      : 192.168.3.2
Subnet Mask     : 255.255.255.0
IP Broadcast    : 192.168.3.255
DNS Name        : localhost.localdomain
Default Gateway : 192.168.3.1
Nameserver(s)   : 207.200.200.10 64.237.112.10

root at localhost.localdomain#ping 192.168.3.1
PING 192.168.3.1 (192.168.3.1) from 192.168.3.2 : 56(84) bytes of data.
64 bytes from 192.168.3.1: icmp_seq=0 ttl=255 time=265 usec
64 bytes from 192.168.3.1: icmp_seq=1 ttl=255 time=397 usec
64 bytes from 192.168.3.1: icmp_seq=2 ttl=255 time=938 usec
64 bytes from 192.168.3.1: icmp_seq=3 ttl=255 time=596 usec
64 bytes from 192.168.3.1: icmp_seq=4 ttl=255 time=672 usec

--- 192.168.3.1 ping statistics ---
5 packets transmitted, 5 packets received, 0% packet loss
round-trip min/avg/max/mdev = 0.265/0.573/0.938/0.233 ms

root at localhost.localdomain#show images
Device name             Partition#              Image name
-----------             ----------               ----------
Compact flash(cf)       4                       c6svc-fwm-k9.3-1-4-9.bin
root at localhost.localdomain#
root at localhost.localdomain#
root at localhost.localdomain#show version

Maintenance image version: 2.1(5)
mp.2-1-5.bin : Tue Nov 11 20:29:43 GMT 2008 : integ at kplus-build-lx.cisco.com

Line Card Number :WS-SVC-FWM-1
Number of Pentium-class Processors :       1
BIOS Vendor: Phoenix Technologies Ltd.
BIOS Version: 4.0-Rel 6.0.9
Total available memory: 1008 MB
Size of compact flash: 122 MB
Daughter Card Info: Number of DC Processors: 3
Size of DC Processor Memory (per proc): 32 MB

root at localhost.localdomain#
!Can we ping the ftp server????
root at localhost.localdomain#ping 192.168.0.10
PING 192.168.0.10 (192.168.0.10) from 192.168.3.2 : 56(84) bytes of data.
64 bytes from 192.168.0.10: icmp_seq=0 ttl=60 time=17.261 msec
64 bytes from 192.168.0.10: icmp_seq=1 ttl=60 time=17.799 msec
64 bytes from 192.168.0.10: icmp_seq=2 ttl=60 time=16.929 msec
64 bytes from 192.168.0.10: icmp_seq=3 ttl=60 time=17.052 msec
64 bytes from 192.168.0.10: icmp_seq=4 ttl=60 time=17.173 msec

--- 192.168.0.10 ping statistics ---
5 packets transmitted, 5 packets received, 0% packet loss
round-trip min/avg/max/mdev = 16.929/17.242/17.799/0.342 ms
root at localhost.localdomain#
root at localhost.localdomain#
root at localhost.localdomain#
root at localhost.localdomain#upgrade ftp://user:password@192.168.0.10/home/fwsm/c6svc-fwm-k9.4-1-11.bin cf:4
Downloading the image. This may take several minutes...
ftp:/:nitel99 at 192.168.0.10/home/fwsm/c6svc-fwm-k9.4-1-11.bin (6240K)
/tmp/upgrade              [########################]    6240K | 1333.76K/s
6390272 bytes transferred in 4.68 sec (1333.71k/sec)

Upgrade file ftp://user:password@192.168.0.10/home/fwsm/c6svc-fwm-k9.4-1-11.bin is downloaded.
Upgrading will wipe out the contents on the storage media.
Do you want to proceed installing it [y|N]: y

Proceeding with upgrade. Please do not interrupt.
If the upgrade is interrupted or fails, boot into
Maintenance image again and restart upgrade.
Do you want to retain the configuration [y|N]: y
Backing up FWSM configuration.
Restoring FWSM configuration.
Application image upgrade complete. You can boot the image now.
root at localhost.localdomain#
root at localhost.localdomain#logout

[Connection to 127.0.0.91 closed by foreign host]
SW1#
SW1#hw-module module 9 reset
Proceed with reload of module?[confirm]
% reset issued for module 9

!Check status
SW1#show mod 9
Mod Ports Card Type                              Model              Serial No.
--- ----- -------------------------------------- ------------------ -----------
  9    6  Firewall Module (MP)                   WS-SVC-FWM-1       SADMYSERIAL

Mod MAC addresses                       Hw    Fw           Sw           Status
--- ---------------------------------- ------ ------------ ------------ -------
  9  0018.19ed.ea08 to 0018.19ed.ea0f   4.0   7.2(1)       2.1(5)m      Other

Mod  Online Diag Status
---- -------------------
  9  Pass
SW1#


!Module is back up
SW1#show mod 9
Mod Ports Card Type                              Model              Serial No.
--- ----- -------------------------------------- ------------------ -----------
  9    6  Firewall Module                        WS-SVC-FWM-1       SADMYSERIAL

Mod MAC addresses                       Hw    Fw           Sw           Status
--- ---------------------------------- ------ ------------ ------------ -------
  9  0018.19ed.ea08 to 0018.19ed.ea0f   4.0   7.2(1)       4.1(11)      Ok

Mod  Online Diag Status
---- -------------------
  9  Pass
SW1#
SW1#

!Connect to the module
SW1#session slot 9 processor 1
The default escape character is Ctrl-^, then x.
You can also type 'exit' at the remote prompt to end the session
Trying 127.0.0.91 ... Open


User Access Verification

Password:
Type help or '?' for a list of available commands.
FWSM> en
Password: *****

! Check FW Version
FWSM# sh ver

FWSM Firewall Version 4.1(11) <system>

Compiled on Mon 03-Dec-12 09:56 by fwsmbld

FWSM up 3 mins 1 sec

Hardware:   WS-SVC-FWM-1, 1024 MB RAM, CPU Pentium III 1000 MHz
Flash TOSHIBA THNCF128MBA @ 0xc321, 20MB

 0: Int: GigabitEthernet0    : address is 0018.197c.e800, irq 5
 1: Int: GigabitEthernet1    : address is 0018.197c.e800, irq 7
 2: Int: EOBC0               : address is 0000.1900.0000, irq 11
The Running Activation Key is not set, using default settings:

Licensed features for this platform:
Maximum Interfaces          : 300
Inside Hosts                : Unlimited
Failover                    : Active/Active
VPN-DES                     : Enabled
VPN-3DES-AES                : Enabled
Cut-through Proxy           : Enabled
Guards                      : Enabled
URL Filtering               : Enabled
Security Contexts           : 2
GTP/GPRS                    : Disabled
BGP Stub                    : Disabled
Service Acceleration        : Disabled
VPN Peers                   : Unlimited

Serial Number: SADMYSERIAL
Running Activation Key: 0x00000000 0x00000000 0x00000000 0x00000000
Configuration has not been modified since last system restart.

!Check to make sure all you old configs files are there.
FWSM# dir

Directory of disk:/

9      -rw-  1122        12:09:42 Feb 06 2013  context1.cfg
10     -rw-  2290        17:11:56 Feb 06 2013  admin.cfg
12     -rw-  6390272     16:49:04 Feb 06 2013  c6svc-fwm-k9.4-1-11.bin
3136   -rw-  13740644    16:51:26 Feb 06 2013  asdm-623f.bin

60532736 bytes total (40361984 bytes free)
FWSM#

Upgrade the ASDM software
------------------------------------
ASDM software is in flash:/asdm
The file name must be asdm, you can only have one version and can't choose the filename

I already had it download to disk:/, but you can download it from a tftp, ftp, http, and etc.

FWSM# copy disk:/asdm-623f.bin flash:/asdm

Source filename [asdm.bin]?

Destination filename [asdm]?

Writing current ASDM file flash:/asdm
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
13740644 bytes copied in 65.10 secs (211394 bytes/sec)
FWSM#

FWSM# sh ver

FWSM Firewall Version 4.1(11) <system>
>>>>>Device Manager Version 6.2(3)F

Then go to the interface ip of the admin interfaces. Also make sure http is enabled.
FWSM# show context
Context Name      Class      Interfaces           Mode         URL
*admin            default    Vlan10,Vlan11        Routed       disk:/admin.cfg
 Context1 default    Vlan102,Vlan103      Routed       disk:/context1.cfg

Total active Security Contexts: 2
FWSM# changeto context admin
FWSM/admin# sh run | i http
http server enable
http 0.0.0.0 0.0.0.0 inside
FWSM/admin#
FWSM/admin# sh interface inside
Interface Vlan10 "inside", is up, line protocol is up
        Description: MANAGEMENT Interface
        MAC address 0018.197c.e800, MTU 1500
        IP address 192.168.3.71, subnet mask 255.255.255.0


-----Original Message-----
From: Erik Sundberg
Sent: Wednesday, February 06, 2013 9:27 PM
To: 'Justin M. Streiner'; Cisco-nsp (cisco-nsp at puck.nether.net)
Subject: RE: [c-nsp] FWSM Maintenance software - where to download from

Justin,

It's not a "patch" for a software release.



I found the software for the Maintenance Partition it's located in the download manager under.....
        Cisco Interfaces and Modules
        Cisco Services Modules
        Cisco Catalyst 6500/6000 Series Services Maintenance Partition Maintenance
        Partition Software-2.1(5)

        Filename: c6svc-mp.2-1-5.bin.gz

You would think that they would also put a link to the software under the FWSM section...

Thanks

Erik

-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net [mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Justin M. Streiner
Sent: Wednesday, February 06, 2013 8:46 PM
To: Cisco-nsp (cisco-nsp at puck.nether.net)
Subject: Re: [c-nsp] FWSM Maintenance software - where to download from

On Wed, 6 Feb 2013, Justin M. Streiner wrote:

> On Wed, 6 Feb 2013, Erik Sundberg wrote:
>
>>  Where in cisco's download tool do you download the maintenance
>> software  for the Firewall Services Module?
>>
>>  It's not listed under the FWSM Section under the following area
>> Switches  Campus LAN Switches - Core and Distribution  Cisco Catalyst
>> 6500 Series Switches  Cisco Catalyst 6509-E Switch  Cisco Catalyst
>> 6500 Series Firewall Services Module  Firewall Services Module (FWSM)
>> Software-4.1(11)
>>
>>  Only the FWSM Image is located here...
>
> Not sure what you mean by maintenance software.  Do you mean ASDM?
>
> ASDM for FWSM is here:
> http://software.cisco.com/download/release.html?mdfid=277413409&softwa
> reid=280775067&release=6.2%283%29F&relind=AVAILABLE&rellifecycle=&relt
> ype=latest
>
> If you mean something else, I'm not sure where you'd find it.  In that
> case, the best bet would be to check with the TAC or your account team.

I normally don't reply to my own posts, but I had another thought after I sent this.

If you're referring to a maintenance release of code, I've found one of two things to be the case in the past:
1. The TAC needs to make it available for you on request, or...
2. The release you see on CCO is the maintenance release.  For whatever reason, Cisco has often been very bad at clearly identifying maintenance/interim releases as such on CCO, at least for the FWSM and ASA.  I don't know if it's a business unit policy thing or what, but it can make things confusing for customers because you're not quite certain you're downloading the version of code that has feature or bug fix XYZ, and the image posting date on CCO doesn't always help.

jms
_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

CONFIDENTIALITY NOTICE: This e-mail transmission, and any documents, files or previous e-mail messages attached to it may contain confidential information that is legally privileged. If you are not the intended recipient, or a person responsible for delivering it to the intended recipient, you are hereby notified that any disclosure, copying, distribution or use of any of the information contained in or attached to this transmission is STRICTLY PROHIBITED. If you have received this transmission in error please notify the sender immediately by replying to this e-mail. You must destroy the original transmission and its attachments without reading or saving in any manner. Thank you.



More information about the cisco-nsp mailing list