topic Re: PIX Conversion in Network Security

PIX Conversion

harvey.dewan — Fri, 21 Feb 2020 07:06:23 GMT

I am in the middle of changing from a 520 to a 515. I have moved everything except the VPN tunnels. I an getting the following error, when I enter the "no sysopt route dnat" command.

"The sysopt route dnat option has been deprecated"

Any thoughs.

The 520 was runnign 6.1

Teh 515 is running 6.3

Re: PIX Conversion

lwierenga — Sat, 15 Nov 2003 04:36:13 GMT

route dnat appears to be removed from sysopt in v6.3

6.3 command reference for sysopt:

[no] sysopt connection permit-pptp | permit-l2tp | permit-ipsec

[no] sysopt connection tcpmss bytes

[no] sysopt connection timewait

[no] sysopt ipsec pl-compatible

[no] sysopt nodnsalias inbound | outbound

[no] sysopt noproxyarp if_name

[no] sysopt radius ignore-secret

[no] sysopt uauth allow-http-cache

clear sysopt

show sysopt

Re: PIX Conversion

hando — Tue, 25 Nov 2003 13:22:25 GMT

Since PIX OS 6.2, the overlapping configurations of network addresses and routes are automatically handled by outside NAT. The sysopt route dnat command is ignored and deprecated. Therefore you should not worry about it.