Solved

Copy config from Cisco ASA 5510 to 5512-x

Posted on 2014-07-22
6
1,689 Views
Last Modified: 2014-07-28
Hello Experts,

I am currently running an ASA 5510 with version 8.2(5) as my network firewall.  I have acquired an ASA 5512-x, and would like to configure it on the side using the same config that I currently have.  I am aware that the rules structure is different as of version 8.3.  While I am used to configuring rules via the CLI and do have ASDM, I have never done an initial setup out of the box, nor dealt with the security licenses, vpn setup, etc.

I would appreciate any advice/insight on how best to proceed with this.

Thanks!
0
Comment
Question by:lor1974
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
6 Comments
 
LVL 29

Expert Comment

by:Jan Springer
ID: 40212301
Downgrade the 5512 to 8.2(5)

Copy the configuration.

Upgrade to 8.3.  The upgrade will convert the configuration for you.  You will want to go back and clean out the old 8.2 stuff.  I would recommend at least one more upgrade to 8.4 as there were modest changes there and do at least 8.6 if not v9.
0
 
LVL 57

Expert Comment

by:Pete Long
ID: 40212681
^^ Agreed - I'd upgrade the 5510 - but the effect is the same :)

PL
0
 
LVL 29

Expert Comment

by:Jan Springer
ID: 40212737
I have upgraded production ASAs from 8.2 to 8.3 and later but short of re-writing the configuration, this seams a simpler solution with minimal downtime to the network.
0
Ready to trade in that old firewall?

Whether you need to trade-up to a shiny new Firebox or just ready to upgrade from whatever appliance you're using now, WatchGuard has the right appliance for you! Find your perfect Firebox today with appliance sizing tool!

 

Author Comment

by:lor1974
ID: 40223973
Thanks for the replies.  According to the documentation, the 5512 does not support anything under 8.6.
0
 
LVL 29

Accepted Solution

by:
Jan Springer earned 500 total points
ID: 40224109
Then you have two options:

1) upgrade the 5510 to 8.3 then 8.4 then 8.6 and copy the configuration to the 5512.
or
2) learn the new way of doing NAT and using objects and apply the manually converted configuration to the 5512.
0
 

Author Comment

by:lor1974
ID: 40224147
That's what I figured.  I am going to go with option 2.
0

Featured Post

Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
For months I had no idea how to 'discover' the IP address of the other end of a link (without asking someone who knows), and it drove me batty. Think about it. You can't use Cisco Discovery Protocol (CDP) because it's not implemented on the ASAs.…
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …
Both in life and business – not all partnerships are created equal. Spend 30 short minutes with us to learn:   • Key questions to ask when considering a partnership to accelerate your business into the cloud • Pitfalls and mistakes other partners…
Suggested Courses

617 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question