Cisco 7604 Configuration Guide - Page 551

Chapter 24 Managing Software, Licenses, and Configurations Installing Application or ASDM Software Installing Application Software from the Maintenance Partition If you log in to the maintenance partition, you can install application software to either application partition (cf:4 or cf:5). Note The FWSM maintenance partition can only use VLAN 1 on the switch. The FWSM does not support 802.1Q tagging on VLAN 1. Using an address in the 10.3.1.0/24 subnet for the maintenance partition IP address can cause communication problems with other hosts on that subnet; the FWSM uses 10.3.1.1 for internal diagnostics. You must use maintenance software Release 2.1(2) or later with the FWSM. See the "Installing Maintenance Software" section on page 24-12 to upgrade. Note If upgrading to a new maintenance release using failover: If you have an Active/Standby failover pair, first perform this procedure on the standby unit; after the standby unit reloads, force the active unit to fail over to the standby unit using the no failover active command in the system execution space of the active unit; then upgrade the active unit. For Active/Active failover, make both failover groups active on the primary unit by entering the failover active command in the system execution space of the primary unit. Then perform this procedure on the secondary unit. After you complete the upgrade procedure for the secondary unit, make both failover groups active on the secondary unit using the no failover active command in the system execution space of the primary unit. Then upgrade the active unit. If upgrading to a minor or major release using failover: If you have a failover pair, upgrade the primary unit first, but then be sure to start the upgrade on the secondary unit before the primary unit comes online with the new version. If both units are running, and the major version number does not match (3.1 vs. 3.2), then both units become active. Two active units can cause networking problems. To install application software from an FTP server while logged in to the maintenance partition, perform the following steps: Step 1 Step 2 Each application partition has its own startup configuration, so you need to make the current configuration available to copy to the backup application partition, if desired. You can either copy it to an available TFTP, FTP, or HTTP(S) server, or you can enter the show running-config command and cut and paste the configuration from the terminal. If necessary, end the FWSM session by entering the following command: hostname# exit Logoff [Connection to 127.0.0.31 closed by foreign host] Router# Step 3 You might need to enter the exit command multiple times if you are in a configuration mode. To view the current boot partition, enter the command for your operating system. Note the current boot partition so you can set a new default boot partition. • Cisco IOS software Router# show boot device [mod_num] OL-20748-01 Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM 24-5