cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
469
Views
0
Helpful
2
Replies

PIX 520 migration

Rafael Jimenez
Level 4
Level 4

I have Pix 520(6.3(3)) and i'd like to replace it with one ASA5020 but the problem is in the old config ( Conduit ,Fixup,interfaces , VPN and...)

how can i convert the old config (6.3(3)) to the new one (7.2(2))

1 Accepted Solution

Accepted Solutions

JORGE RODRIGUEZ
Level 10
Level 10

Hi Rafael, there is currently no config conversion tools from goint to one platform of PIX to ASA that Im aware of, if you were upgrading code 6.3 to 7.x on same box the conversion would happened in the upgrade process but not in your case. Is your config a very extensive config on the 520?

I would suggest though to go over this link to reference depricated features that PIX uses and have either been replaced or removed on versions 7.x, for example condult has been depricated and replaced by way of acls , by refering to this link you can start building config on the 5520 ASA platform based on this information.

http://www.cisco.com/en/US/docs/security/asa/asa70/pix_upgrade/upgrade/guide/pixupgrd.html#wp1811886

HTH

Jorge

Jorge Rodriguez

View solution in original post

2 Replies 2

JORGE RODRIGUEZ
Level 10
Level 10

Hi Rafael, there is currently no config conversion tools from goint to one platform of PIX to ASA that Im aware of, if you were upgrading code 6.3 to 7.x on same box the conversion would happened in the upgrade process but not in your case. Is your config a very extensive config on the 520?

I would suggest though to go over this link to reference depricated features that PIX uses and have either been replaced or removed on versions 7.x, for example condult has been depricated and replaced by way of acls , by refering to this link you can start building config on the 5520 ASA platform based on this information.

http://www.cisco.com/en/US/docs/security/asa/asa70/pix_upgrade/upgrade/guide/pixupgrd.html#wp1811886

HTH

Jorge

Jorge Rodriguez

An ASA with 7.0(7) code will accept a copy and paste of 6.x configuration and convert to the 7.x format. Example:

FIXUP:

VBASA(config)# fixup protocol dns maximum-length 512

INFO: converting 'fixup protocol dns maximum-length 512' to MPF commands

VBASA(config)# fixup protocol ftp 21

INFO: converting 'fixup protocol ftp 21' to MPF commands

VBASA(config)# fixup protocol h323 h225 1720

INFO: converting 'fixup protocol h323_h225 1720' to MPF commands

VPN:

VBASA(config)# vpngroup vbvpn address-pool vb-vpn-client-pool

WARNING: the 'vpngroup' command has been deprecated, and will be converted to the corresponding tunnel-group and group-policy syntax

VBASA(config)# vpngroup vbvpn dns-server 4.2.2.2

WARNING: the 'vpngroup' command has been deprecated, and will be converted to the corresponding tunnel-group and group-policy syntax

VBASA(config)# vpngroup vbvpn split-tunnel splittunnel

WARNING: the 'vpngroup' command has been deprecated, and will be converted to the corresponding tunnel-group and group-policy syntax

HTH,

Mark

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: