topic pix os 6.3 configuration backup and restoration in Network Security

pix os 6.3 configuration backup and restoration

sivakondalarao — Mon, 11 Mar 2019 11:56:48 GMT

Hi,

Please let me know the procedure to restore configuration using pix os 6.3, I am able to take backup using configure net command. But restoration not successful. Configuration is stored in my tftp root directory.

Regards

skrao

Re: pix os 6.3 configuration backup and restoration

Collin Clark — Thu, 31 Jan 2008 15:44:57 GMT

You can open the config file with any text editor and copy-n-paste each line into the new pix.

HTH

Re: pix os 6.3 configuration backup and restoration

cisco24x7 — Thu, 31 Jan 2008 16:04:52 GMT

That is NOT correct. You have to be careful about pasting the configuration back in.

Simple copy and past will NOT work, especially

when you have VPN in the configuration. This

is especially difficult when you have

certificate-based VPN.

CCIE Security

Re: pix os 6.3 configuration backup and restoration

sivakondalarao — Thu, 31 Jan 2008 16:15:45 GMT

Hi,

I have faced problem with copy/paste. I am trying to learn the proper method.

regards

skrao

Re: pix os 6.3 configuration backup and restoration

Collin Clark — Thu, 31 Jan 2008 16:28:39 GMT

The correct way to is to configure the device again. Perhaps a training class or self study with a book will help.

Re: pix os 6.3 configuration backup and restoration

Collin Clark — Thu, 31 Jan 2008 16:29:34 GMT

I've never had a problem with it. Granted you need to remember to generate keys and such, but 99% of the config can be c-n-p.

Re: pix os 6.3 configuration backup and restoration

sivakondalarao — Sat, 02 Feb 2008 14:31:20 GMT

Hi,

why we don't have restoration facility like we have in routers"copy tftp flash:".

regards

sivakondala rao

Re: pix os 6.3 configuration backup and restoration

JORGE RODRIGUEZ — Sun, 03 Feb 2008 00:33:11 GMT

Hi Sivakondala, the proper method is knowing both. I would have to agree with David and Collin up to certain extend depending on the size of the configuration of the firewalls and how complex the configuration is you should aquaint your self in undertanding firewall configuration format statements, I have used copy and paste many times without issues but if you are new to firewalls it is best to use the PIX backup and restore process which is very simple, not quite as the copy tftp flash you would expect like in routers or ios based switches, but you will be able to use this copy flash tftp with the new ASA firewalls, in fact you can use the copy tftp flash and vice versa in ASA's and be able to backup your ASA firewall code something that is not possible in PIX 6.x or earlier codes.

Going back to your original concern you should be able to back up your PIX config and restore %100 the configuration as easy as it gets, but as other recommended it is good to understand the config systax so that you can copy and paste basic configuration witout having to rely on ASDM.

e.g

assume tftp server is 10.2.2.2

to backup

pix#write net 10.2.2.2:pixcfg_bkp

to restore

pix(config)#configure net 10.2.2.2:pixcfg_bkp

here is a very good link explaining back up and restore configs.

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a008072142a.shtml

Rgds

Jorge