Upgrading a PIX with 6.3 code to 8.0

adbradle · ‎07-02-2009

I am upgrading from a 515E to and ASA 5510 and I have multiple VPN tunnels setup in the configuration. I don't have all the documentation on them, meaning all of of the keys. Does anyone know how to pull the current config with the keys unencrypted?

JORGE RODRIGUEZ · ‎07-02-2009

For PIX 6.0 and prior save the config to an TFTP server. The file can then be loaded with any text editor, it should provide you with all pre-share keys in clear text.

See solution 3

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a00807f2d37.shtml

Regards

Jorge Rodriguez

branfarm1 · ‎07-02-2009

Hi there,

Here's a CiscoWiki page that has instructions on how to recover pre-shared keys from your config.

http://supportwiki.cisco.com/ViewWiki/index.php/How_to_recover_or_view_the_encrypted_pre-shared_keys_on_the_PIX/ASA_Firewall

Hope that helps!

--Brandon