I have several remote PIX 501s that have VPNs back to my location. I have remote telnet access via the VPN connection. I would like to change the configurations so the VPNs terminate to my ASA rather than my older 3030. Is there anyway to modify the startup-config on a PIX 501 running 6.3? There is no copy tftp start-up command, only a configure net command which merges the config to running. This wont work for me since I need to also change inside IP addresses which is how I am connected. I really need to change startup config and reload.
ca gen rsa key 1024
ssh 0 0 outside
the best solution (and easiest) i've found for that situation is to configure ssh to the outside interface from just the IP you're coming from...
then ssh into it and change peers, your ssh session won't be disconnected then, and you can still troubleshoot remotely.