Backup PIX 515

[Mober]

I have just found 2 PIX 515's which are identical to my production firewall. Can I take the configuration file from my production firewall and copy it to my new spare firewalls. If so does Cisco have any notes on doing this?

 

[PcClone]

You could use the command:

copy startup-command tftp
or
copy running-config tftp

or use ftp to replace tftp depending on software version

If the pix are the EXACT same (version, interfaces, etc) I don't see any reason it won't work.

You could then use a copy command to copy the config from the tftp server to the running or saved config.

 

[Mober]

Both commands failed to work so after doing some hunting around I tried the write net command to my TFTP server and I get an access violation. Can anyone explain what this means, thanks.

 

[Supergrrover]

Take a look at this doc. It gives a solid run through -

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a008072142a.shtml

make sure that you have the correct permissions on the server so you can upload the files (check web server and file system permissions.)


Brent
Systems Engineer / Consultant
CCNP, CCSP