Link to home
Start Free TrialLog in
Avatar of jpletcher1
jpletcher1Flag for United States of America

asked on

Cisco ASA upgrade to 8.3 is there a utility to run the config through to test the NAT changes?

I'm running 8.2 on my ASAs now and I'd like to install 8.3, but I'm nervous about doing so with the new NAT changes.  Is there a utility that I can run my config through to see what the output will be when 8.3 reconfigures it and also if there will be any errors?  That would make me feel much better about the upgrade.
ASKER CERTIFIED SOLUTION
Avatar of Hilal1924
Hilal1924
Flag of India image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of jpletcher1

ASKER

Thanks, I do have a Cisco account.  Can you send me the link to the tool?  Is it just a tool for PIX to ASA or Other Firewall to ASA migrations?  Or can you use it for seeing what would happen when upgrading from one Cisco IOS to a newer IOS?
SOLUTION
Avatar of Istvan Kalmar
Istvan Kalmar
Flag of Hungary image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
I do understand that the upgrade will take care of the changes in syntax for me.  I do know though that there can be hangups during an upgrade if there are problems with the 8.3 upgrade not being able to fully translate.  So I was hoping to run my exising 8.2 config through a utility or something and see what the 8.3 output would be, and if there would be any errors.
I've found a problem:
https://www.experts-exchange.com/Security/Software_Firewalls/Enterprise_Firewalls/Cisco_PIX_Firewall/A_3938-ASA-8-2-to-8-3-nonat-migration-probem.html


If you feel there is a migration problem after hardware upgrade, view the errors with:
hostname# show startup-config errors
Yes I agree  the issues that you face while migrating can be only related with Nat Control and Object Model. While these errors do not bring down your configuration they can be very severe when trying to figure out where the problem is. So it is better to understand the new changes in ASA and then Migrating. And Also please follow the link that I posted in my first comment.
Thanks guys, I will go off the articles and keep my fingers crossed.  I have an active and standby unit, so it shouldn't be too risky to update one and see how it goes before I do the other.