cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1344
Views
0
Helpful
7
Replies

Moving Ipsec conf. form PIX to ASA

IgorHamzic
Level 1
Level 1

Hi.I have one quick question.I have a PIX configured with Ipsec configuration but we have now upgraded to an ASA.

Can I just copy paste the configuration from PIX to ASA(all the crypto and isakmp commands) or do I have to change some commands for it to work?

ASA uses the same addresses that PIX used in its configuration.

1 Accepted Solution

Accepted Solutions

"isakmp key"" command is replaced with tunnel-group"

use :-

tunnel-group xx.xx.xx.xx type ipsec-l2l

tunnel-group xx.xx.xx.xx ipsec-attributes

pre-shared-key "isakmp key"

where xx.xx.xx.xx is the address of the peer.

isakmp policy are replced with

crypto isakmp policy "number"

authentication

encryption

hash

group

lifetime

Hope this helps.

View solution in original post

7 Replies 7

johnd2310
Level 8
Level 8

Hi,

What version is the pix running and what version is the asa running.

regards

John

**Please rate posts you find helpful**

PIX is running version 6.3(5) and ASA is running version 7.0(6).

are you running isakmp pre shared keys or CA

Pre shared keys.

Hi,

You should be able to copy and paste some of the old config to the new box as most command are converted automatically. You might want to look at the following doc to review some of the commands you might need to configure manually:http://www.cisco.com/en/US/docs/security/asa/asa70/pix_upgrade/upgrade/guide/pixupgrd.html

Regards

John

**Please rate posts you find helpful**

"isakmp key"" command is replaced with tunnel-group"

use :-

tunnel-group xx.xx.xx.xx type ipsec-l2l

tunnel-group xx.xx.xx.xx ipsec-attributes

pre-shared-key "isakmp key"

where xx.xx.xx.xx is the address of the peer.

isakmp policy are replced with

crypto isakmp policy "number"

authentication

encryption

hash

group

lifetime

Hope this helps.

Thanks for all your help.It helped me configure it ASA without problem.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: