Loading PIX config using cut/paste

[willscarlet]

We are moving offices and going to a new ISP. I have a PIX520 Version 5.2(3) which is currently working OK.

I have copied the current config into Notepad and edit/replaced the old legal IP addresses and subnet mask with the ones allocated by my new ISP. The inside addresses are in the 10.xxx.xxx.xxx range and are unchanged.

I plan to copy the new config to the PIX using cut and paste as follows:

enable
config t
clear xlate
paste new config
quit
write memory

I am unsure about the enable password and passwd lines in the config, see below

enable password **************** encrypted
passwd **************** encrypted

do I copy these back as part of the entire config or should I remove them?

Also is replacing the entire config like this a good or bad way to do it?

 

[yizhar]

HI.

I suggest the following:

1) Establish serial connection - not telnet for this to work.

2) clear the old config to avoid conflicts because the copy and paste method can leave leftovers from old config:

write erase
reload

3) paste new config, excluding passwords.
enable
conf t
Now paste...

4) Manualy enter passwords.

5) Verify connectivity using telnet access with renewed passwords to avoid typos and such...

6) Save and reboot:
write mem
reload

7) Now start debugging other problems related to the ISP change.

Don't forget to update DNS!

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar