Could be very tough to do without failing over, and maybe breaking the 
interfirewall comms after failover.

Do you have a failover interface and a state interface? If you have both and 
you are replicating all of the sessions, the users don't usually notice the 
failover.

-----Original Message-----
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Nick 
Hilliard
Sent: Tuesday, June 28, 2016 11:07 AM
To: Mihai Gabriel <mihaigabr...@gmail.com>
Cc: cisco-nsp@puck.nether.net
Subject: Re: [c-nsp] ASA cluster downgrade

Mihai Gabriel wrote:
> standby ASA boots with 8.2 version (and the 8.2 startup-config) and 
> starts the config replication, the configuration is messed up by the active 
> unit.
> Doing a failover to the standby unit will impact the services.
> Is there a way to achieve this without disabling the clustering 
> feature and downgrading individually?

probably not from 8.4 to 8.2, no. The NAT configuration mechanism changed 
considerably in 8.3 and 8.2 will not be able to read 8.3+ configs.

Time to get out the configuration backups.

Nick

_______________________________________________
cisco-nsp mailing list  cisco-nsp@puck.nether.net 
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

_______________________________________________
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Reply via email to