Cisco 515e - Starter Problems 2

[LedZepRock]

Hi all, 2 quick questions if I may.

1, Simple one this, but I am buggered if I can find the correct syntax, I have managed to copy my config to a TFTP server, but how to I copy it back onto the PIX (overwriting the config)??

2, This PIX has been purchased to replace a Solaris Gauntlet Firewall, while I am moving all the VPN's and rules across I have a requirment to have both firewalls connected to the internet, now both now have differing internet ip's and all was OK, but as soon as I turn on the DMZ interface, our websites (on the Gauntlet DMZ), stop working, I can then stop the PIX's DMZ and they work again. I understand most routing problems, but do these firewalls decide who gets external packets?? do I need to put static routes on my router?? I have set this up as router to a hub with both firewalls external interfaces plugged into the hub.

Any help on these would be nice.

Ta

 

[themut]

1. With the write net... command you save your configuration from the PIX to a TFTP server.
The configure net... command merges the configuration on the TFTP server with your running configuration.

http://cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/cmdref/c.htm#1055799

2. Since you are using different IP addresses on both firewalls you need to configure static routes on your outside router to redirect the traffic to the new firewall.

 

[LedZepRock]

Thanks for the help, I still have a problem though.

What I really want to do is save a copy of the config to a TFTP server, I then want to edit it and then copy it back, so I dont want to merge them, just replace the old setup with my new one (now on the TFTP server). How do I do that? I have looked at the link you gave me (and searched the Internet) and can't find a answer to this.

Thanks

 

[SecManDA]

I think that using TeraTerm would help you. When you open TeraTerm (or putty and hyperterminal), you can highlight and then ctrl-c ctrl-v to copy and paste your configuration after doing a wr term. you can paste the configuration into a text file and then edit it.

After you have modified the commands, you can then Ctrl-c to copy and then use TeraTerm to paste (edit paste in menu) the commands into the pix firewall in the conf t mode.

I have erase the configuration on a pix firewall, reloaded and then used this method to restore the original configuration.

YOu can download teraterm (the latest I found is version 3.13) for free by searching google.

Hope this helps.