topic Re: PIX version conversion? in Network Security

PIX version conversion?

mfistler — Fri, 21 Feb 2020 05:48:16 GMT

Question,

We’ve all heard talk in this discussion group about bidding farewell to conduits and adopting access lists for PIX version 6.0 and the PIX Device Manager (PDM). The question churning in my brain is, what happens if I just put version 6.0 on my existing PIX running version 5.3(1). Is the configuration gone, will it be automatically converted? Also will my existing VPN tunnels and commands between my legacy PIX’s still function?

Any thoughts?

Michael T. Fistler

Cisco CCIE #4503

Sr. Systems Engineer, Networking Concepts, Inc.

Re: PIX version conversion?

pdentico — Mon, 11 Jun 2001 19:39:15 GMT

Your conduits and Crypto maps will survive the conversion. I did this very thing 2 weeks ago. The only problem I had was I lost my Verisign Certificate, and had to re-issue the cert. The PDM will not work with any VPN commands from what I've seen in the documentation.

PDentico

DentiCom, Inc.

Re: PIX version conversion?

martin.laplante — Fri, 22 Jun 2001 15:50:28 GMT

but the conduits are not convert in acl statement in my tests.

Re: PIX version conversion?

rstaaf — Fri, 22 Jun 2001 15:56:30 GMT

I doubt even when Cisco drops support for conduits that the upgrade process will do the conversion for you. There is too much of a possibility for breaking you config. You will have to manually convert from conduits to access lists and groups when the time comes.

Bob