1、开启TFTP server，并且保证设备和TFTP
server可达。
2、上传镜像文件到ASA：
ciscoasa# copy tftp: disk0: >>>>拷贝镜像到ASA disk0
Address or name of remote
host []? 192.168.111.2
Source filename []? asa917-20-k8.bin
Destination filename
[asa917-20-k8.bin]? asa917-20-k8.bin
Accessing
tftp://192.168.111.2/asa917-20-k8.bin...!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Writing file
disk0:asa917-20-k8.bin…
27426816 bytes copied in
29.800 secs (945752 bytes/sec)
ciscoasa# dir >>>>查看目前镜像以及所剩的空间
Directory of disk0:/
3 drwx
2048 00:31:08 Jan 01
2008 log
6 drwx
2048 00:31:24 Jan 01
2008 crypto_archive
76 -rwx
0 00:31:28 Jan 01
2008 nat_ident_migrate
82 -rwx
2177 00:31:28 Jan 01
2008 8_2_5_0_startup_cfg.sav
10 drwx
2048 00:31:28 Jan 01
2008 coredumpinfo
83 -rwx
1225 00:31:28 Jan 01
2008
upgrade_startup_errors_200801010031.log
84 -rwx
25159680 00:51:48 Jan 01
2008 asa842-k8.bin
87 -rwx
27426816 01:43:56 Aug 28 2008 asa917-20-k8.bin
128573440
bytes total (75687936 bytes free)
3、验证完整性：（可选）
ciscoasa# verify
disk0:asa917-20-k8.bin
Verifying file integrity
of disk0:/asa917-20-k8.bin!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Embedded Hash MD5:
8c3f0c748f5b2f5a21242c038d56dd35
Computed Hash MD5:
8c3f0c748f5b2f5a21242c038d56dd35
CCO Hash MD5: 437b5297eca7d4284a16f9f25485506c
Signature Verified
Verified
disk0:/asa917-20-k8.bin
4、修改启动镜像
ciscoasa(config)# boot
system disk0:/asa917-20-k8.bin
5、查看启动镜像及顺序
ciscoasa# show bootvar
BOOT variable = disk0:/asa842-k8.bin;disk0:/asa917-20-k8.bin
Current BOOT variable =
disk0:/asa842-k8.bin;disk0:/asa917-20-k8.bin
CONFIG_FILE variable =
Current CONFIG_FILE
variable =
6、去掉之前的镜像或删除原镜像的启动路径（还是删除启动路径的好）
ciscoasa(config)# delete
disk0:/asa842-k8.bin
Delete filename
[asa842-k8.bin]?
Delete
disk0:/asa842-k8.bin? [confirm]
ciscoasa(config)# dir
Directory of disk0:/
3 drwx
2048 00:31:08 Jan 01
2008 log
6 drwx
2048 00:31:24 Jan 01
2008 crypto_archive
77 -rwx
0 00:31:28 Jan 01
2008 nat_ident_migrate
84 -rwx
2177 00:31:28 Jan 01
2008 8_2_5_0_startup_cfg.sav
10 drwx
2048 00:31:28 Jan 01
2008 coredumpinfo
85 -rwx
1225 00:31:28 Jan 01
2008
upgrade_startup_errors_200801010031.log
87 -rwx
27426816 01:43:56 Aug 28
2008 asa917-20-k8.bin
=======================================
ciscoasa(config)# no boot system disk0:/asa842-k8.bin
ciscoasa# sho bootvar
BOOT
variable = disk0:/asa842-k8.bin;disk0:/asa917-20-k8.bin
>>>发现还是存在
Current BOOT variable =
disk0:/asa917-20-k8.bin
CONFIG_FILE variable =
Current CONFIG_FILE
variable =
ciscoasa#
wr memory >>>保存后生效
Building configuration...
Cryptochecksum: 489e5c00
3ea0a2d8 4da33988 ff85739a
2809 bytes copied in
1.260 secs (2809 bytes/sec)
[OK]
ciscoasa# show bootvar
BOOT variable =
disk0:/asa917-20-k8.bin
Current BOOT variable =
disk0:/asa917-20-k8.bin
CONFIG_FILE variable =
Current CONFIG_FILE
variable =
7、重启设备
ciscoasa(config)# reload
8、查看版本
ciscoasa# sh version
Cisco Adaptive Security
Appliance Software Version 9.1(7)20
Compiled on Thu 02-Nov-17
18:27 by builders
System image file is
"disk0:/asa917-20-k8.bin"
