https://community.cisco.com/t5/network-security/pix-520-migration/m-p/848962#M973504 <P>I have Pix 520(6.3(3)) and i'd like to replace it with one ASA5020 but the problem is in the old config ( Conduit ,Fixup,interfaces , VPN and...)</P><P>how can i convert the old config (6.3(3)) to the new one (7.2(2)) </P> Mon, 11 Mar 2019 11:26:34 GMT Rafael Jimenez 2019-03-11T11:26:34Z https://community.cisco.com/t5/network-security/pix-520-migration/m-p/848962#M973504 <P>I have Pix 520(6.3(3)) and i'd like to replace it with one ASA5020 but the problem is in the old config ( Conduit ,Fixup,interfaces , VPN and...)</P><P>how can i convert the old config (6.3(3)) to the new one (7.2(2)) </P> Mon, 11 Mar 2019 11:26:34 GMT https://community.cisco.com/t5/network-security/pix-520-migration/m-p/848962#M973504 Rafael Jimenez 2019-03-11T11:26:34Z https://community.cisco.com/t5/network-security/pix-520-migration/m-p/848963#M973505 <HTML><HEAD></HEAD><BODY><P>Hi Rafael, there is currently no config conversion tools from goint to one platform of PIX to ASA that Im aware of, if you were upgrading code 6.3 to 7.x on same box the conversion would happened in the upgrade process but not in your case. Is your config a very extensive config on the 520?</P><P>I would suggest though to go over this link to reference depricated features that PIX uses and have either been replaced or removed on versions 7.x, for example condult has been depricated and replaced by way of acls , by refering to this link you can start building config on the 5520 ASA platform based on this information.</P><P></P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/docs/security/asa/asa70/pix_upgrade/upgrade/guide/pixupgrd.html#wp1811886" target="_blank">http://www.cisco.com/en/US/docs/security/asa/asa70/pix_upgrade/upgrade/guide/pixupgrd.html#wp1811886</A></P><P></P><P>HTH</P><P>Jorge</P><P></P><P></P><P> </P></BODY></HTML> Wed, 17 Oct 2007 14:54:57 GMT https://community.cisco.com/t5/network-security/pix-520-migration/m-p/848963#M973505 JORGE RODRIGUEZ 2007-10-17T14:54:57Z https://community.cisco.com/t5/network-security/pix-520-migration/m-p/848964#M973507 <HTML><HEAD></HEAD><BODY><P>An ASA with 7.0(7) code will accept a copy and paste of 6.x configuration and convert to the 7.x format. Example:</P><P></P><P>FIXUP:</P><P>VBASA(config)# fixup protocol dns maximum-length 512</P><P>INFO: converting 'fixup protocol dns maximum-length 512' to MPF commands</P><P>VBASA(config)# fixup protocol ftp 21</P><P>INFO: converting 'fixup protocol ftp 21' to MPF commands</P><P>VBASA(config)# fixup protocol h323 h225 1720</P><P>INFO: converting 'fixup protocol h323_h225 1720' to MPF commands</P><P></P><P>VPN:</P><P>VBASA(config)# vpngroup vbvpn address-pool vb-vpn-client-pool</P><P>WARNING: the 'vpngroup' command has been deprecated, and will be converted to the corresponding tunnel-group and group-policy syntax</P><P>VBASA(config)# vpngroup vbvpn dns-server 4.2.2.2</P><P>WARNING: the 'vpngroup' command has been deprecated, and will be converted to the corresponding tunnel-group and group-policy syntax</P><P>VBASA(config)# vpngroup vbvpn split-tunnel splittunnel</P><P>WARNING: the 'vpngroup' command has been deprecated, and will be converted to the corresponding tunnel-group and group-policy syntax</P><P></P><P>HTH,</P><P>Mark</P><P></P></BODY></HTML> Wed, 21 Nov 2007 19:41:06 GMT https://community.cisco.com/t5/network-security/pix-520-migration/m-p/848964#M973507 cairnsm 2007-11-21T19:41:06Z