Step by Step guide to upgrade Cisco ASA IOS and ASDM Version

Important: Even though below steps are common to upgrade any version of Cisco ASA IOS and ASDM, you need to verify in cisco.com website to understand the vendor recommended upgrade path. Below is the step by step guide to upgrade Cisco ASA IOS version from 8.6(1)2 to 9.1(2).

Refer Cisco recommended upgrade path for Cisco ASA  IOS Version

(config)# show version
Cisco Adaptive Security Appliance Software Version 8.6(1)2
Device Manager Version 6.6(1)
Compiled on Fri 01-Jun-12 02:16 by builders
System image file is “disk0:/asa861-2-smp-k8.bin”
Config file at boot was “startup-config”

so, our upgrade path is as follows

first upgrade 8.6(1) to 9.0(2) and finally to 9.1(2), simultaneously we will upgrade our ASDM version to 7.1(5) that supports 9.1(2) version of IOS

Upgrade ASA version from 8.6(1)2 to 9.0(2)

Note: No need to upgrade ASDM version at this stage as we still need to upgrade to our final version 9.1(2) so we can upgrade ADSM at the later stage.

Step 1: Verify that you have enough disk space in Cisco ASA to load new bin, I have 3.7 Gbytes space, so no worries!
Note: Use Whatsbyte.com for bytes conversion

asa-disk-space

Step 2: Download following versions from cisco.com (you need a smartnet login!)

  • Download 9.0(2) and 9.1(2) version of IOS
  • Download 7.1(5) version of ASDM

Step 3: Download and setup TFTP server from solarwinds.com

Step 4: Upload 9.0(2) version to ASA via tftp server
(config) # copy tftp: disk0:
Run ‘show disk0:‘ command to verify that bin is copied to ASA

asa-upgrade-tftp-disk0

Step 5: Set ASA to boot with new image 9.0(2) when it is rebooted next time (don’t forget to save the image!).
(config)# boot system disk0:/asa902-10-smp-k8.bin
(config)# wr mem
(config) # reload

asa-boot-new-bin

Step 6: Once ASA started operating, run ‘Show Version‘ and verify that the running IOS version is 9.0(2)

Upgrade ASA version from 9.0(2) to 9.1(2)  and ASDM version to 7.1(5)

Note: Nothing new, except we are going to upload latest ASDM version

Step 1: Upload 9.1(2) version to ASA via tftp server

asa-upload-bin-912

Step 2: Upload ASDM 7.1(5) version to ASA via tftp server

asa-upload-asdm-715

Step 3: Set ASA to boot with new image 9.1(2) and also ASDM with 7.1(5) when it is rebooted next time (don’t forget to save the image!).

(config)# boot system disk0:/asa912-smp-k8.bin

(config)# asdm image disk0:/asdm-715.bin

asa-boot-912

Step 4: Verify that the loaded version is 9.1(2) and then We are done!

Leave a Reply