background image

 

13

Upgrade/Downgrade Guide, Cisco ACE 4700 Series Application Control Engine Appliance

OL-25719-01

Upgrading Your ACE Software in a Redundant Configuration

Changing the www User Password

Before you upgrade the ACE software, you 

must

 change the default www user password if you have not 

already done so. Otherwise, after you upgrade the ACE software, the www user password will be 
disabled and you will not be able to use Extensible Markup Language (XML) to remotely configure an 
ACE until you change the default www user password.

For details on changing a user account password, see Chapter 2, Configuring Virtualization, in the 

Virtualization Guide, Cisco ACE Application Control Engine

. In this case, the username is 

www

Caution

If you do not change the www user password prior to upgrading the ACE software, the configuration 
synchronization may fail and the context may not be in the STANDBY_HOT state.

Removing the duplex Command from the ACE Configuration

As a result of a 

duplex

 command syntax change between A3(2.1) and A3(2.2), if your ACE 

configuration includes one or more Gigabit Ethernet ports that are configured for full or half duplex 
operation, before you upgrade from A3(2.1) to A3(2.2), or A3(2.2) to software version A3(2.3) or later, 
you must first remove the duplex configuration from the startup-configuration file on both the active 
ACE and standby (peer) ACE.

Perform the following configuration change on both the active ACE and standby (peer) ACE before you 
begin the upgrade procedure:

Step 1

Use the 

no

 form of the 

duplex

 command in interface configuration mode to remove the duplex 

configuration from all configured Gigabit Ethernet ports.

Step 2

Use the 

copy running-config startup-config 

command to save the changes from the 

running-configuration file to the startup-configuration file.

After you complete the upgrade procedure, you can update the duplex settings for the configured Gigabit 
Ethernet ports using software version A3(2.3) or later. See Chapter 1, Configuring Ethernet Interfaces, 
in the 

Routing and Bridging Guide, Cisco ACE Application Control Engine.

Removing the Underscore Character from a Hostname

Before you upgrade the ACE appliance software from A3(2.0) to A4(1.0) or later as a result of 
addressing CSCsr90184, the underscore character (_) is no longer allowed in the hostname. As a result 
of this change, if you do not modify a hostname by removing the underscore character (_), after you 
perform an upgrade, the standby ACE remains in the STANDBY_COLD state because the configuration 
cannot synchronize with the illegal character.

Creating a Checkpoint

We strongly recommend that you create a checkpoint of the running-configuration of each context in 
your ACE. A checkpoint creates a snapshot of your configuration that you can later roll back to in case 
a problem occurs with an upgrade and you want to downgrade the software to a previous version. Use 
the 

checkpoint create 

command in Exec mode in each context for which you want to create a 

configuration checkpoint and name the checkpoint. For details about creating a checkpoint and rolling 
back a configuration, see the 

Administration Guide, Cisco ACE Application Control Engine

.

Содержание ACE-4710-1F-K9

Страница 1: ... Appliance For information on the ACE features and configuration details see the ACE appliance documentation located on www cisco com at http www cisco com en US products ps7027 tsd_products_support_series_home html This guide contains the following sections Upgrade Scenarios Based on Licenses in Software Release A4 1 1 A3 2 7 and Earlier Upgrade Scenarios Based on Software Release A4 2 0 and Late...

Страница 2: ...on limited by device throughput 7500 SSL TPS 20 VCs ACE 4710 0 5F K9 0 5 Gbps throughput 100 Mbps compression 100 SSL TPS 5 VCs Throughput upgrade only Start upgrade with ACE 4710 BUN UP1 1 Gbps throughput 500 Mbps compression 5000 SSL TPS 5 VCs ACE 4710 1F K9 1 Gbps throughput 500 Mbps compression 5000 SSL TPS 5 VCs Increased SSL compression and or VCs Software upgrade to version A4 2 0 1 Gbps th...

Страница 3: ...ut upgrade only Upgrade with ACE 4710 BUN UP3 4 Gbps throughput 2 Gbps compression 7500 SSL TPS 5 VCs ACE 4710 4F K9 4 Gbps throughput 2 Gbps compression 7500 SSL TPS 5 VCs Increased VC only possible option everything else is maximized Software upgrade to version A4 2 0 2 Gbps throughput 2 Gbps compression 7500 SSL TPS 20 VCs ACE 4710 A La Carte Licenses ACE4710 with 1 Gbps throughput ACE AP 01 LI...

Страница 4: ... Upgrade with ACE AP 04 UP1 4 Gbps throughput Retains previous combination of feature licenses ACE4710 with 2 Gbps throughput ACE AP 02 LIC Any combination of feature licenses Increased SSL compression and or VCs Software upgrade to version A4 2 0 2 Gbps throughput 2 Gbps compression 7500 SSL TPS 20 VCs ACE4710 with 2 Gbps throughput ACE AP 02 LIC Any combination of feature licenses Throughput upg...

Страница 5: ...bps throughput 500 Mbps compression 5000 SSL TPS 5 VCs Increased SSL compression and or VCs Software upgrade to version A4 2 0 1 Gbps throughput Up to 2 Gbps of compression limited by device throughput 7500 SSL TPS 20 VCs ACE 4710 1F K9 1 Gbps throughput 500 Mbps compression 5000 SSL TPS 5 VCs Throughput upgrade only Start upgrade with ACE 4710 BUN UPG2 2 Gbps throughput Up to 2 Gbps of compressio...

Страница 6: ...sion A4 2 0 4 Gbps throughput 2 Gbps compression 7500 SSL TPS 20 VCs ACE 4710 A La Carte Licenses ACE4710 with 1 Gbps throughput ACE AP 01 LIC Any combination of feature licenses Increased SSL compression and or VCs Software upgrade to version A4 2 0 1 Gbps throughput Up to 2 Gbps of compression limited by device throughput 7500 SSL TPS 20 VCs ACE4710 with 1 Gbps throughput ACE AP 01 LIC Any combi...

Страница 7: ...m an earlier version you may obtain new feature capabilities maximum limits for compression SSL TPS and the number of virtual contexts depending on your current license levels without having to buy new software licenses After you have upgraded to software version A4 2 0 if you need to downgrade to an earlier software version the earlier software version reverts to the earlier feature limits that y...

Страница 8: ...follow the instructions that direct you to the following Cisco com website If you are a registered user of cisco com go to the following location http www cisco com go license If you are not a registered user of cisco com go to the following location http www cisco com go license public Step 3 Enter the Product Authorization Key PAK number found on the Software License Claim Certificate as your pr...

Страница 9: ...fore you upgrade your ACEs to software version A4 2 0 and later In software version A4 2 0 and later the maximum number of concurrent connections for optimization is reduced to 100 connections If the ACE startup configuration contains the concurrent connections command in optimize configuration mode consider the following If you upgrade the ACE to version A4 2 0 or later the ACE software ignores t...

Страница 10: ...ate configuration mode is disabled on the standby ACE and configuration and state synchronization continues A failover from the active ACE to the standby ACE based on priorities and preemption can still occur while the standby is in the STANDBY_WARM state When redundancy peers run on different version images the SRG compatibility field of the show ft peer detail command output displays WARM_COMPAT...

Страница 11: ...ACE Software Version A3 2 1 A3 2 2 A3 2 3 A3 2 4 A3 2 5 A3 2 6 A3 2 7 A4 1 0 A4 1 1 A4 2 0 A4 2 1 A4 2 2 A5 1 0 A3 2 1 C C WC WC WC WC WC WC WC WC WC WC WC A3 2 2 C C WC WC WC WC WC WC WC WC WC WC WC A3 2 3 WC WC C WC WC WC WC WC WC WC WC WC WC A3 2 4 WC WC WC C WC WC WC WC WC WC WC WC WC A3 2 5 WC WC WC WC C WC WC WC WC WC WC WC WC A3 2 6 WC WC WC WC WC C WC WC WC WC WC WC WC A3 2 7 WC WC WC WC W...

Страница 12: ...atibility If you make any configuration changes on the active ACE during this time your changes are not synchronized to the standby and are lost After you complete the upgrade config sync is automatically reenabled We recommend that you do not make any configuration changes while the two ACEs are in split mode Changing the Admin Password Before you upgrade to ACE software version A3 1 0 or higher ...

Страница 13: ...grade procedure Step 1 Use the no form of the duplex command in interface configuration mode to remove the duplex configuration from all configured Gigabit Ethernet ports Step 2 Use the copy running config startup config command to save the changes from the running configuration file to the startup configuration file After you complete the upgrade procedure you can update the duplex settings for t...

Страница 14: ...to creating a checkpoint of the running configuration of each context in your ACE we also strongly recommend that you use the copy startup config command to copy the startup configuration of each context to either The disk0 file system on your ACE An TFTP FTP or SFTP server Having a backup of the startup configuration of each context ensures that you can recover your ACE should an issue arise duri...

Страница 15: ...T variable image c4710ace t1k9 mz A5_1_0 bin Configuration register is 0x1 Step 7 Remove the existing image from the boot variable on ACE 1 by entering the no boot system image ACE_image command in configuration mode For example to remove the A3 2 1 image enter ACE 1 Admin configure Enter configuration commands one per line End with CNTL Z ACE 1 Admin config no boot system image c4710ace t1k9 mz A...

Страница 16: ...ecovered to a STANDBY_HOT state If the standby ACE is running software version A3 2 2 or later the state is STANDBY_WARM Step 12 Perform a graceful failover of all contexts from ACE 1 to ACE 2 by entering the ft switchover all command in Exec mode on ACE 1 ACE 2 becomes the new active ACE and assumes control of all active connections with no interruption to existing connections ACE 1 Admin ft swit...

Страница 17: ...timization is reduced to 100 connections If your startup configuration contains the concurrent connections command in optimize configuration mode and you downgrade the ACE from software version A4 2 0 this command is removed from the startup configuration You must reconfigure it after the downgrade process is completed If your ACE includes the 0 5 Gbps bundled license ACE 4710 0 5F K9 that is avai...

Страница 18: ...rtup configuration file you may observe a few errors if you did not roll back the configuration to a checkpoint These errors are harmless and occur because the ACE software does not recognize the A4 2 0 or later commands in the startup configuration file Note Dynamic incremental sync is automatically disabled while the active ACE is running software version A4 2 0 or later and the standby ACE is r...

Страница 19: ...g and bridging virtualization and so on Cisco ACE Application Control Engine Troubleshooting Wiki Describes the procedures and methodology in wiki format to troubleshoot the most common problems that you may encounter during the operation of your ACE Command Reference Cisco ACE 4700 Series Application Control Engine Provides an alphabetical list and descriptions of all CLI commands by mode includi...

Страница 20: ...n protocol and HTTP deep packet inspection TCP IP normalization and termination parameters Network Address Translation NAT Server Load Balancing Guide Cisco ACE Application Control Engine Describes how to configure the following server load balancing features on the ACE Real servers and server farms Class maps and policy maps to load balance traffic to real servers in server farms Server health mo...

Страница 21: ...m go trademarks Third party trademarks mentioned are the property of their respective owners The use of the word partner does not imply a partnership relationship between Cisco and any other company 1005R Any Internet Protocol IP addresses used in this document are not intended to be actual addresses Any examples command display output and figures included in the document are shown for illustrativ...

Страница 22: ...22 Upgrade Downgrade Guide Cisco ACE 4700 Series Application Control Engine Appliance OL 25719 01 Obtaining Documentation and Submitting a Service Request ...

Отзывы: