Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

PIX 520 migration

I have Pix 520(6.3(3)) and i'd like to replace it with one ASA5020 but the problem is in the old config ( Conduit ,Fixup,interfaces , VPN and...)

how can i convert the old config (6.3(3)) to the new one (7.2(2))

1 ACCEPTED SOLUTION

Accepted Solutions

Re: PIX 520 migration

Hi Rafael, there is currently no config conversion tools from goint to one platform of PIX to ASA that Im aware of, if you were upgrading code 6.3 to 7.x on same box the conversion would happened in the upgrade process but not in your case. Is your config a very extensive config on the 520?

I would suggest though to go over this link to reference depricated features that PIX uses and have either been replaced or removed on versions 7.x, for example condult has been depricated and replaced by way of acls , by refering to this link you can start building config on the 5520 ASA platform based on this information.

http://www.cisco.com/en/US/docs/security/asa/asa70/pix_upgrade/upgrade/guide/pixupgrd.html#wp1811886

HTH

Jorge

2 REPLIES

Re: PIX 520 migration

Hi Rafael, there is currently no config conversion tools from goint to one platform of PIX to ASA that Im aware of, if you were upgrading code 6.3 to 7.x on same box the conversion would happened in the upgrade process but not in your case. Is your config a very extensive config on the 520?

I would suggest though to go over this link to reference depricated features that PIX uses and have either been replaced or removed on versions 7.x, for example condult has been depricated and replaced by way of acls , by refering to this link you can start building config on the 5520 ASA platform based on this information.

http://www.cisco.com/en/US/docs/security/asa/asa70/pix_upgrade/upgrade/guide/pixupgrd.html#wp1811886

HTH

Jorge

New Member

Re: PIX 520 migration

An ASA with 7.0(7) code will accept a copy and paste of 6.x configuration and convert to the 7.x format. Example:

FIXUP:

VBASA(config)# fixup protocol dns maximum-length 512

INFO: converting 'fixup protocol dns maximum-length 512' to MPF commands

VBASA(config)# fixup protocol ftp 21

INFO: converting 'fixup protocol ftp 21' to MPF commands

VBASA(config)# fixup protocol h323 h225 1720

INFO: converting 'fixup protocol h323_h225 1720' to MPF commands

VPN:

VBASA(config)# vpngroup vbvpn address-pool vb-vpn-client-pool

WARNING: the 'vpngroup' command has been deprecated, and will be converted to the corresponding tunnel-group and group-policy syntax

VBASA(config)# vpngroup vbvpn dns-server 4.2.2.2

WARNING: the 'vpngroup' command has been deprecated, and will be converted to the corresponding tunnel-group and group-policy syntax

VBASA(config)# vpngroup vbvpn split-tunnel splittunnel

WARNING: the 'vpngroup' command has been deprecated, and will be converted to the corresponding tunnel-group and group-policy syntax

HTH,

Mark

233
Views
0
Helpful
2
Replies
CreatePlease login to create content