Configuration migration from PIX to ASA

ccs_jet_user · ‎01-28-2008

Dear collegues!

Could you help me with my question?

Can I migrate a configuration from PIX515 to ASA5510 in this cases?:

1) PIX OS ver 6 -> ASA OS ver 7

2) PIX OS ver 7 -> ASA OS ver 7

Is the process of configuation migration clear?

What issues could be with configuration migration from PIX to ASA?

Thanks a lot!

m.sir · ‎01-28-2008

Here is a step-by-step guide to 6.x to 7.x migration:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00807c3627.shtml#c3

Naturally - I would recommend saving a copy of your config and having a fallback plan in the event of any issues.

PIX 6.3 to PIX 7 is automated process

check this link

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00807c3627.shtml

Regarding PIX 7 to ASA 7 you shouldnt have any issues - syntax and commands are pretty same s

If you need upgrade from pix 6.3 to ASA 7.0 i suggest upgdrade to PIX 7 and then move to ASA

M.

Hope that helps rate if it does

ccs_jet_user · ‎01-28-2008

Thanks a lot!

chitre_salil · ‎01-28-2008

Hi,

PIX OS version 6 to ASA OS ver 7 - As long as your config does not contain conduits there should not be any problem.

We had a similar migration recently and we had the complete config ready on the ASA first. We tested the basic access-lists and translations in a test environment before deploying it in production.

Thanks,

Salil

ahpark78 · ‎01-28-2008

Yeah, Salil got the point there.

The config should not have contain conduits. It always good to test from the basic configuration like what Salil suggested.

Ken,

http://pixfirewallnotes.blogspot.com