jpletcher1
asked on
Cisco ASA upgrade to 8.3 is there a utility to run the config through to test the NAT changes?
I'm running 8.2 on my ASAs now and I'd like to install 8.3, but I'm nervous about doing so with the new NAT changes. Is there a utility that I can run my config through to see what the output will be when 8.3 reconfigures it and also if there will be any errors? That would make me feel much better about the upgrade.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
I do understand that the upgrade will take care of the changes in syntax for me. I do know though that there can be hangups during an upgrade if there are problems with the 8.3 upgrade not being able to fully translate. So I was hoping to run my exising 8.2 config through a utility or something and see what the 8.3 output would be, and if there would be any errors.
I've found a problem:
https://www.experts-exchange.com/Security/Software_Firewalls/Enterprise_Firewalls/Cisco_PIX_Firewall/A_3938-ASA-8-2-to-8-3-nonat-migration-probem.html
If you feel there is a migration problem after hardware upgrade, view the errors with:
hostname# show startup-config errors
https://www.experts-exchange.com/Security/Software_Firewalls/Enterprise_Firewalls/Cisco_PIX_Firewall/A_3938-ASA-8-2-to-8-3-nonat-migration-probem.html
If you feel there is a migration problem after hardware upgrade, view the errors with:
hostname# show startup-config errors
Yes I agree the issues that you face while migrating can be only related with Nat Control and Object Model. While these errors do not bring down your configuration they can be very severe when trying to figure out where the problem is. So it is better to understand the new changes in ASA and then Migrating. And Also please follow the link that I posted in my first comment.
ASKER
Thanks guys, I will go off the articles and keep my fingers crossed. I have an active and standby unit, so it shouldn't be too risky to update one and see how it goes before I do the other.
ASKER