Monday, July 27, 2009

FWSM Upgarde

Step 1 Make the new software image available on a TFTP server, or make the MSFC a TFTP server by using this command:

msfc(config)# tftp-server bootflash:image name 

Step 2 If the MSFC is the TFTP server, make sure you have a VLAN interface on the MSFC reachable from the module. For example:

a. On the MSFC, enter these commands:

router(config)# interface Vlan30 
router(config)# description to_fwsm_vlan_30 
router(config)# ip address 10.20.30.2 255.255.255.0 
router(config)# no ip redirects 

b. On the module, enter these commands:

nameif vlan30 inside security100 
... 
ip address inside 10.20.30.5 255.255.255.0 

c. From the module make sure that you can ping the MSFC, by entering this command:

FWSM# ping 10.20.30.2 
10.20.30.2 response received -- 0ms 
10.20.30.2 response received -- 0ms 
10.20.30.2 response received -- 0ms 

Step 3 From the module enter the copy tftp flash command:

FWSM# copy tftp flash 
Address or name of remote host [127.0.0.1]? 10.20.30.2 
Source file name [cdisk]? c6svc-fwm-k9.1-1-0-207.bin 
copying tftp://10.20.30.2/c6svc-fwm-k9.1-1-0-207.bin to flash:image 
[yes|no|again]?yes 

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! 

The output shows the MSFC as the TFTP server.

Step 4 Reload the module by entering this command:

FWSM# reload