Solved

Copy config from Cisco ASA 5510 to 5512-x

Posted on 2014-07-22
6
1,438 Views
Last Modified: 2014-07-28
Hello Experts,

I am currently running an ASA 5510 with version 8.2(5) as my network firewall.  I have acquired an ASA 5512-x, and would like to configure it on the side using the same config that I currently have.  I am aware that the rules structure is different as of version 8.3.  While I am used to configuring rules via the CLI and do have ASDM, I have never done an initial setup out of the box, nor dealt with the security licenses, vpn setup, etc.

I would appreciate any advice/insight on how best to proceed with this.

Thanks!
0
Comment
Question by:lor1974
  • 3
  • 2
6 Comments
 
LVL 28

Expert Comment

by:Jan Springer
Comment Utility
Downgrade the 5512 to 8.2(5)

Copy the configuration.

Upgrade to 8.3.  The upgrade will convert the configuration for you.  You will want to go back and clean out the old 8.2 stuff.  I would recommend at least one more upgrade to 8.4 as there were modest changes there and do at least 8.6 if not v9.
0
 
LVL 57

Expert Comment

by:Pete Long
Comment Utility
^^ Agreed - I'd upgrade the 5510 - but the effect is the same :)

PL
0
 
LVL 28

Expert Comment

by:Jan Springer
Comment Utility
I have upgraded production ASAs from 8.2 to 8.3 and later but short of re-writing the configuration, this seams a simpler solution with minimal downtime to the network.
0
How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

 

Author Comment

by:lor1974
Comment Utility
Thanks for the replies.  According to the documentation, the 5512 does not support anything under 8.6.
0
 
LVL 28

Accepted Solution

by:
Jan Springer earned 500 total points
Comment Utility
Then you have two options:

1) upgrade the 5510 to 8.3 then 8.4 then 8.6 and copy the configuration to the 5512.
or
2) learn the new way of doing NAT and using objects and apply the manually converted configuration to the 5512.
0
 

Author Comment

by:lor1974
Comment Utility
That's what I figured.  I am going to go with option 2.
0

Featured Post

Better Security Awareness With Threat Intelligence

See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

Join & Write a Comment

Suggested Solutions

Title # Comments Views Activity
Changing DHCP scope with a different subnet mask 3 60
The purpose of Root Bridge 7 27
Cisco switch SVI 17 39
Cisco / asa /Nagios 3 10
When I upgraded my ASA 8.2 to 8.3, I realized that my nonat statement was failing!   The log showed the following error:     %ASA-5-305013: Asymmetric NAT rules matched for forward and reverse flows It was caused by the config upgrade, because t…
Quality of Service (QoS) options are nearly endless when it comes to networks today. This article is merely one example of how it can be handled in a hub-n-spoke design using a 3-tier configuration.
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now