Chapter 41
Managing Software, Licenses, and Configurations
Upgrading an Active/Standby Failover Configuration
To upgrade two units in an Active/Standby failover configuration, perform the following steps:
Step 1
Download the new software to both units, and specify the new image to load with the boot system
command (see the
page
Reload the standby unit to boot the new image by entering the following command on the active unit:
Step 2
active# failover reload-standby
Step 3
When the standby unit has finished reloading, and is in the Standby Ready state, force the active unit to
fail over to the standby unit by entering the following command on the active unit.
Note
active# no failover active
Reload the former active unit (now the new standby unit) by entering the following command:
Step 4
newstandby# reload
When the new standby unit has finished reloading, and is in the Standby Ready state, return the original
Step 5
active unit to active status by entering the following command:
newstandby# failover active
Upgrading and Active/Active Failover Configuration
To upgrade two units in an Active/Active failover configuration, perform the following steps:
Download the new software to both units, and specify the new image to load with the boot system
Step 1
command (see the
page
Step 2
Make both failover groups active on the primary unit by entering the following command in the system
execution space of the primary unit:
primary# failover active
Reload the secondary unit to boot the new image by entering the following command in the system
Step 3
execution space of the primary unit:
primary# failover reload-standby
When the secondary unit has finished reloading, and both failover groups are in the Standby Ready state
Step 4
on that unit, make both failover groups active on the secondary unit using the following command in the
system execution space of the primary unit:
Note
OL-12172-03
"Configuring the Application Image and ASDM Image to Boot" section on
41-5).
Use the show failover command to verify that the standby unit is in the Standby Ready state.
"Configuring the Application Image and ASDM Image to Boot" section on
41-5).
Use the show failover command to verify that both failover groups are in the Standby Ready
state on the secondary unit.
Performing Zero Downtime Upgrades for Failover Pairs
Cisco Security Appliance Command Line Configuration Guide
41-7