topic Re: Preshared keys after PIX OS Upgradation in Network Security

Preshared keys after PIX OS Upgradation

rkumares — Mon, 11 Mar 2019 09:23:52 GMT

I have to upgrade the PIX OS from 6.3(1) to 7.X.There are few crypto ( site-site)configs with preshared keys.I remember that I had faced issues on the 1700/2600 old routers when upgrading the IOS, the preshared keys seems to be not working.I used to manually configure the same.Not sure with pix.Since the administrator has forgotten the PRESHARED key, now I cant take any risk on going for the upgradation.Did any one had issues with crypto configs after the code upgradation with PIX 525 ?.

Thanks,

Rajan

Re: Preshared keys after PIX OS Upgradation

Collin Clark — Tue, 23 Jan 2007 22:14:33 GMT

You can get the preshared key if you do a 'write network' on the PIX (same as copy run tftp on a router).

HTH and please rate.

Re: Preshared keys after PIX OS Upgradation

jwalker — Tue, 23 Jan 2007 22:21:48 GMT

Even easier than setting up a TFTP server... If you login to the PIX using ASDM, you can view (in clear text) the preshared keys for a particular tunnel group. Go to Config --> VPN --> General --> Tunnel Group --> Edit Tunnel Group --> IPsec tab --> Pre-Shared Key

Please rate if this helps.

Re: Preshared keys after PIX OS Upgradation

rkumares — Wed, 24 Jan 2007 12:12:55 GMT

Hi,

thanks for all your responses.Yes, write net is an option but I didnt try since 6.3.1 to 7.X is major code change.I could try all these by knowing the preshared keys on hand.

What I need to confirm is " there should not be any issues" after the OS upgradation.If wr net misses the preshared key somehow, I should not be in trouble.Coming to the ASDM part, the code is 6.3(1) which supports pdm only.

Did anyone experienced with the preshared key issues after the upgradtion

Thanks,

Rajan

Re: Preshared keys after PIX OS Upgradation

Collin Clark — Wed, 24 Jan 2007 14:22:38 GMT

We don't do any VPN on our PIXes so I can't really comment on it. I would think that if there were a lot of problems with the upgrades and VPN keys, you would hear about it (here, google groups, TAC, etc.)

Re: Preshared keys after PIX OS Upgradation

dbnorton — Wed, 24 Jan 2007 19:02:31 GMT

I have recently did two upgrades on a couple of PIX 515's running 6.3(4) code and the pre-shared keys stayed in tact. You should be good to go. But as a precaution I would always do a write net before any upgrade.