cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
792
Views
0
Helpful
4
Replies

Configuration migration from PIX to ASA

ccs_jet_user
Level 1
Level 1

Dear collegues!

Could you help me with my question?

Can I migrate a configuration from PIX515 to ASA5510 in this cases?:

1) PIX OS ver 6 -> ASA OS ver 7

2) PIX OS ver 7 -> ASA OS ver 7

Is the process of configuation migration clear?

What issues could be with configuration migration from PIX to ASA?

Thanks a lot!

4 Replies 4

m.sir
Level 7
Level 7

Here is a step-by-step guide to 6.x to 7.x migration:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00807c3627.shtml#c3

Naturally - I would recommend saving a copy of your config and having a fallback plan in the event of any issues.

PIX 6.3 to PIX 7 is automated process

check this link

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00807c3627.shtml

Regarding PIX 7 to ASA 7 you shouldnt have any issues - syntax and commands are pretty same s

If you need upgrade from pix 6.3 to ASA 7.0 i suggest upgdrade to PIX 7 and then move to ASA

M.

Hope that helps rate if it does

Thanks a lot!

chitre_salil
Level 1
Level 1

Hi,

PIX OS version 6 to ASA OS ver 7 - As long as your config does not contain conduits there should not be any problem.

We had a similar migration recently and we had the complete config ready on the ASA first. We tested the basic access-lists and translations in a test environment before deploying it in production.

Thanks,

Salil

Yeah, Salil got the point there.

The config should not have contain conduits. It always good to test from the basic configuration like what Salil suggested.

Ken,

http://pixfirewallnotes.blogspot.com

Review Cisco Networking for a $25 gift card