Cisco ACE-4710-1F-K9 User Manual page 9

Upgrading Your ACE Software in a Redundant Configuration
This procedure assumes that your ACE appliances are configured as redundant peers to ensure that there
is no disruption to existing connections during the upgrade process. In the following procedure, the
active ACE is referred to as ACE-1 and the standby ACE is referred to as ACE-2.
This section includes the following topics:
•
•
•
Upgrade Guidelines and Limitations
When you are upgrading the ACE, consder the following guidelines and limitations:
•
•
•
•
OL-25719-01
Upgrade Guidelines and Limitations
Before You Begin
Upgrade Procedure
All DM GUI browsers require that you enable cookies, JavaScript/scripting, Adobe Flash Player 9,
and popup windows. Whenever you plan to upgrade the ACE appliance software, end clients will
need to clear their browser cache of each client to properly use the DM GUI.
During an upgrade of two redundant ACEs from software version A4(1.0) to software version
A4(2.0) or later, while the two ACEs are in split mode with A4(1.0) running on the active ACE and
A4(2.0) or later running on the standby, config sync is disabled because of a license incompatibility
between the two versions. Do not make any configuration changes while the two ACEs are in split
mode. If you make any configuration changes on the active ACE during this time, your changes are
not synchronized to the standby and are lost.
After you complete the upgrade, config sync is automatically reenabled and works normally. To
avoid this license incompatibility issue, you can install a 20-virtual context license before you
upgrade your ACEs to software version A4(2.0) and later.
In software version A4(2.0) and later, the maximum number of concurrent connections for
optimization is reduced to 100 connections. If the ACE startup configuration contains the
concurrent-connections command in optimize configuration mode, consider the following:
If you upgrade the ACE to version A4(2.0) or later, the ACE software ignores the configured
–
command and sets it to 100 connections.
If you downgrade the ACE from version A4(2.0) or later, the command is removed from the
–
startup configuration, and you must reconfigure it after the downgrade process is completed.
In a redundant configuration, dynamic incremental sync is a form of config sync that copies
configuration changes that you make on the active ACE to the standby ACE when the two ACEs are
running the same version of software and when both ACEs are up. When you upgrade from one
major release of ACE software to another major release (for example, from A3(2.0) to A4(1.0)) or
later, dynamic incremental sync is automatically disabled only while the active ACE is running
software version A4(1.0) and the standby ACE is running software version A3(2.0). See
We recommend that you do not make any configuration changes during this time and that you do not
keep the ACEs in this state for a long time. However, if you must make configuration changes while
the ACEs are in split mode, ensure that you manually synchronize to the standby ACE any
configuration changes that you make on the active ACE. After you complete the software upgrade
of both ACEs, a bulk sync occurs automatically to replicate the entire configuration of the new active
ACE to the new standby ACE. At this time, dynamic incremental sync will be enabled again. For
details about config sync, see Chapter 6, "Configuring Redundant ACEs" in the Administration
Guide, Cisco ACE Application Control Engine.
Upgrade/Downgrade Guide, Cisco ACE 4700 Series Application Control Engine Appliance
Upgrading Your ACE Software in a Redundant Configuration
Table 3.
9