Installation Overview; Installing Application Software From The Fwsm Cli - Cisco 7604 Configuration Manual

Chapter 24 Managing Software, Licenses, and Configurations

Installation Overview

For application software, you can use one of two methods to upgrade:
•
•
To upgrade ASDM, you can only install to the current application partition from the FWSM CLI.
See the
information about application and maintenance partitions.

Installing Application Software from the FWSM CLI

When you log in to the FWSM during normal operation, you can copy the application software to the
current application partition from a TFTP, FTP, HTTP, or HTTPS server.
For multiple context mode, you must be in the system execution space.
To upgrade software to the current application partition from an FTP, TFTP, or HTTP(S) server, perform
the following steps:
Step 1 Enter the following command to confirm access to the selected FTP, TFTP, or HTTP(S) server:
hostname# ping ip_address
Step 2 To copy the application software, enter one of the following commands, directed to the appropriate
download server.
•
•
•
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM
OL-20748-01
Installing to the current application partition from the FWSM CLI
The benefit of this method is you do not have to boot in to the maintenance partition; instead you
log in as usual and copy the new software.
This method supports downloading from a TFTP, FTP, HTTP, or HTTPS server.
You cannot copy software to the other application partition. You might want to copy to the other
partition if you want to keep the old version of software as a backup in the current partition.
You must have an operational configuration with network access. For multiple context mode, you
need to have network connectivity through the admin context.
Installing to any application partition from the maintenance partition
The benefit of this method is you can copy software to both application partitions, and you do not
have to have an operational configuration. You just need to configure some routing parameters in
the maintenance partition so you can reach the server on VLAN 1.
The disadvantage is that you need to boot in to the maintenance partition, which might not be
convenient if you have an operational application partition.
This method supports downloading from an FTP server only.
"Managing the Firewall Services Module Boot Partitions" section on page 2-10
To copy from a TFTP server, enter the following command:
hostname# copy tftp://server[/path]/filename flash:
The flash keyword refers to the application partition on the FWSM. You can only copy an image
and ASDM software to the flash partition. Configuration files are copied to the disk partition.
To copy from an FTP server, enter the following command:
hostname# copy ftp://[user[:password]@]server[/path]/filename flash:
To copy from an HTTP or HTTPS server, enter the following command:
Installing Application or ASDM Software
for more
24-3