pix 6.3 to 7.0 migration command

[khilari]

I was able to just copy and paste the 6.3 config into 7.0 and it worked fine for the most part. The commands that are giving me error are the following (pasting output below)

Is there anyway to get around it? If this can't be done, what would I miss from the old config from the users standpoint? Thanks for your time.

hostname(config)# vpdn group PPTP-VPDN-GROUP accept dialin pptp
ERROR: % This command is an unreleased and unsupported feature

hostname(config)# vpdn group PPTP-VPDN-GROUP ppp authentication pap
ERROR: % This command is an unreleased and unsupported feature

hostname(config)# vpdn group PPTP-VPDN-GROUP ppp authentication chap
ERROR: % This command is an unreleased and unsupported feature

hostname(config)# vpdn group PPTP-VPDN-GROUP ppp authentication mschap
ERROR: % This command is an unreleased and unsupported feature

hostname(config)# vpdn group PPTP-VPDN-GROUP ppp encryption mppe 128
ERROR: % This command is an unreleased and unsupported feature

hostname(config)# vpdn group PPTP-VPDN-GROUP client configuration address local RASVPN
ERROR: % This command is an unreleased and unsupported feature

hostname(config)# vpdn group PPTP-VPDN-GROUP client configuration dns 10.1.44.12
ERROR: % This command is an unreleased and unsupported feature

hostname(config)# vpdn group PPTP-VPDN-GROUP pptp echo 60
ERROR: % This command is an unreleased and unsupported feature

hostname(config)# vpdn group PPTP-VPDN-GROUP client authentication local
ERROR: % This command is an unreleased and unsupported feature

hostname(config)# vpdn enable outside
ERROR: % This command is an unreleased and unsupported feature

hostname(config)# vpdn enable inside
ERROR: % This command is an unreleased and unsupported feature

 

[Supergrrover]

PIX OS 7x does not support PPTP features.
It can pass it through but cannot be the endpoint.

http://www.cisco.com/en/US/products...figuration_guide_chapter09186a0080690661.html

(This is for the concentrator to ASA migration but it is just to see what features the ASA does and does not support.)

Looks like its time to migrate to IPSEC tunnels as well.



Brent
Systems Engineer / Consultant
CCNP, CCSP