PIX Conversion

[harvey.dewan]

I am in the middle of changing from a 520 to a 515. I have moved everything except the VPN tunnels. I an getting the following error, when I enter the "no sysopt route dnat" command.

"The sysopt route dnat option has been deprecated"

Any thoughs.

The 520 was runnign 6.1

Teh 515 is running 6.3

[lwierenga]

route dnat appears to be removed from sysopt in v6.3

6.3 command reference for sysopt:

[no] sysopt connection permit-pptp | permit-l2tp | permit-ipsec

[no] sysopt connection tcpmss bytes

[no] sysopt connection timewait

[no] sysopt ipsec pl-compatible

[no] sysopt nodnsalias inbound | outbound

[no] sysopt noproxyarp if_name

[no] sysopt radius ignore-secret

[no] sysopt uauth allow-http-cache

clear sysopt

show sysopt

[hando]

Since PIX OS 6.2, the overlapping configurations of network addresses and routes are automatically handled by outside NAT. The sysopt route dnat command is ignored and deprecated. Therefore you should not worry about it.