10-17-2007 07:14 AM - edited 03-11-2019 04:26 AM
I have Pix 520(6.3(3)) and i'd like to replace it with one ASA5020 but the problem is in the old config ( Conduit ,Fixup,interfaces , VPN and...)
how can i convert the old config (6.3(3)) to the new one (7.2(2))
Solved! Go to Solution.
10-17-2007 07:54 AM
Hi Rafael, there is currently no config conversion tools from goint to one platform of PIX to ASA that Im aware of, if you were upgrading code 6.3 to 7.x on same box the conversion would happened in the upgrade process but not in your case. Is your config a very extensive config on the 520?
I would suggest though to go over this link to reference depricated features that PIX uses and have either been replaced or removed on versions 7.x, for example condult has been depricated and replaced by way of acls , by refering to this link you can start building config on the 5520 ASA platform based on this information.
http://www.cisco.com/en/US/docs/security/asa/asa70/pix_upgrade/upgrade/guide/pixupgrd.html#wp1811886
HTH
Jorge
10-17-2007 07:54 AM
Hi Rafael, there is currently no config conversion tools from goint to one platform of PIX to ASA that Im aware of, if you were upgrading code 6.3 to 7.x on same box the conversion would happened in the upgrade process but not in your case. Is your config a very extensive config on the 520?
I would suggest though to go over this link to reference depricated features that PIX uses and have either been replaced or removed on versions 7.x, for example condult has been depricated and replaced by way of acls , by refering to this link you can start building config on the 5520 ASA platform based on this information.
http://www.cisco.com/en/US/docs/security/asa/asa70/pix_upgrade/upgrade/guide/pixupgrd.html#wp1811886
HTH
Jorge
11-21-2007 11:41 AM
An ASA with 7.0(7) code will accept a copy and paste of 6.x configuration and convert to the 7.x format. Example:
FIXUP:
VBASA(config)# fixup protocol dns maximum-length 512
INFO: converting 'fixup protocol dns maximum-length 512' to MPF commands
VBASA(config)# fixup protocol ftp 21
INFO: converting 'fixup protocol ftp 21' to MPF commands
VBASA(config)# fixup protocol h323 h225 1720
INFO: converting 'fixup protocol h323_h225 1720' to MPF commands
VPN:
VBASA(config)# vpngroup vbvpn address-pool vb-vpn-client-pool
WARNING: the 'vpngroup' command has been deprecated, and will be converted to the corresponding tunnel-group and group-policy syntax
VBASA(config)# vpngroup vbvpn dns-server 4.2.2.2
WARNING: the 'vpngroup' command has been deprecated, and will be converted to the corresponding tunnel-group and group-policy syntax
VBASA(config)# vpngroup vbvpn split-tunnel splittunnel
WARNING: the 'vpngroup' command has been deprecated, and will be converted to the corresponding tunnel-group and group-policy syntax
HTH,
Mark
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: