Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Cisco Pix 515 Firewall Configuration Backup

I'm relatively new with Cisco firewalls so this may be sort of a "newbie" question. I have two Cisco Pix515 Firewalls - one that is actively in use and the other as a spare. I would like to copy all of the current configuration of the active Pix515 to the spare so that if a need ever arose, I could just swap them out. What would be the best way to do this without disturning my current environment? Please include any commands that I may need to accomplish this task. Thanks in advance for the help!

3 REPLIES
Cisco Employee

Re: Cisco Pix 515 Firewall Configuration Backup

Hi,

setup a tftp server. then issue this command

tftp-server [if_name] ip_address

write net [[server_ip]:[filename

e.g.

tftp-server inside 10.1.1.1

write net

on the new firewall

setup the ip addresses to reach the same tftp server

then issue this command

configure net

or simple copy the configuration to a notepad from your original firewall and paste it into the new firewall, that should work too.

thanks

Nadeem

New Member

Re: Cisco Pix 515 Firewall Configuration Backup

What do you mean by "spare" ? If it is just lying around I would recommend you to confgiure it as a failover box as per the following instructions

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/config/failover.htm

One it would not require you to swap out the device manually in case of failure minimizing downtime and the same time keep the config always in sync.

Hope this helps !

New Member

Re: Cisco Pix 515 Firewall Configuration Backup

Hello !

Check command reference too

http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_command_reference_chapter09186a00801727ae.html#wp1026054

http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_command_reference_chapter09186a00801727ae.html#wp1027782

Consider too the failover capabilities of PIX, check this tech note:

http://www.cisco.com/warp/public/110/failover.html

You can have the 2 units online , one PIX as the "Active" unit while the other is the "Standby" unit.

Hope this helps ...

1523
Views
0
Helpful
3
Replies