Backup pix ios image before upgrade

[raghu.umesh]

Hello,

The "copy tftp flash" command on PIX will erase the existing IOS image in the flash and write the new image into the flash.

What is the procedure if I wanted to save the existing IOS image before the upgrade?

Is there a copy flash tftp or equivalent available?

I am trying to ensure that I dont get stuck if the upgrade goes wrong or if I need to go back to the older version of the IOS.

The PIX hardware we have include 515, 515E, 520 and 525s. The IOSs on these starts with 6.2(2) and stretch all the way to 6.3(3).

Regards,

Raghu

[sachinraja]

Hi Raghu

Use the write net command to store the config file from the pix to the tftp server. you can find the command reference of wr net in the following URL:

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/cmdref/tz.htm#wp1027782

hope this helps.. all the best...

Raj

[raghu.umesh]

You seem to have missed my point - I need to backup the IOS image (.bin file) NOT the configuration file!!

Regards,

Raghu

[thibaut.leduc]

hi,

Why do you want to do that ??? All IOS image like PDM are available there : http://www.cisco.com/cgi-bin/tablebuild.pl/pix

[raghu.umesh]

I have seen that list and I cant find 6.3(1) and 6.3(3) in that list. The closest one is 6.3(4) which may have issues with things on the earlier configs.

At times, newer releases tend to open-up issues which may not have been there in the older release. This might upset the working of the PIXs and the services that are being run through them.

Especially when you are working with the major firewalls that front the entire organisation, you do not want to get into a situation where you can not retrace your steps. You can have a loss of service/connectivity just because a newer release of the IOS messed something. In such a situation, you should be in a position to revert / rollback the change you have implemented - unless you enjoy getting roasted by your management.

Regards,

Raghu

[Patrick Iseli]

The command to copy the image (PIX OS) from the PIX to a tftp does not exist. As allready mentioned in a previous post you just can backup the config file but not the image file.

Second: The reason why some PIX OS version are not any more on the CCO to download is because this version had serious flaws, vulnerebilities and were replaced.

Use GD version if you use GD or ED for ED.

Hope that answered your question.

sincerely

Patrick