PIX 501 Configuration backup/restore

[alan.morris]

It seems that it is possible to save a configuration to a tftp server. But how might one be restored? As far as I can tell there is no config net command.

It would be nice to be able to backup a configuration prior to making any changes in case a rollback is needed.

[bdube]

To backup, use "write net" during configure mode.

To restore use "configure net" also within config mode.

Take care, the config net doesn't behave like configuring a router. On PIX, it's like writing a list of commands one after other. This has a great impact on access-list, for example, which isn't overwrited but simply added.

Regards,

Ben

Don't forget to rate this post if it solves your problem.

[alan.morris]

Tried that but as I said there doesn't seem to be a conf net command see enclosed:

Password:

Type help or '?' for a list of available commands.

PrestburyFW> en

Password: ************

PrestburyFW# conf net

Usage: configure terminal

PrestburyFW# configure net

Usage: configure terminal

PrestburyFW#

I guess that this a 501 limitation?

[jmia]

Hi Alan,

Sorry You cannot download PIX OS images off of a pix but you can download images off of router IOS to tftp, you cannot with a pix. If you have a CCO account through a valid support contract, you can download all supported pix os version from cisco.

Also, here's a useful URL:

http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_command_reference_chapter09186a00800ec9ec.html#1026054

and as a side line, if want to save the running-config of the PIX then you can either use telnet or hyperterminal to connect to the pix and copy the running-config onto a text-editor such as notepad and save this for future use.

Regards - Jay

[bdube · Accepted solution]

Hi Alan,

As indicated you must be in "configure terminal" mode to be able to execute this command. From the enable mode, type "conf t", you will be in conf term mode and you will be able to execute the config net command.

Regards

Ben

[alan.morris]

Sometimes just shouting isn't load enough! Many thanks!

Alan