Upgrade IOS 6.1(1) to 6.2 & LAN Access

[quell]

I have a PIX 515 and I would like to upgrade the IOS and install the PDM. If I upgrade the IOS from 6.1(1) to 6.2(2) will it save the current settings into the new IOS? I have looked all over cisco but cant find the answer anywere.

Plus do I need some sort of TFTP server software to do this?

Also I can connect my Cisco VPN client ver 3.5.2 to the PIX (puts a little gold lock in lower right hand corner)but I cannot browse the network. I've tried checking the allow local LAN access box and tried unchecking it with the same results. Do I need a special access-list to do this or do something the the w2k servers? Can anyone help Thank you

 

[themut]

Hello there,

A software upgrade will keep your current configuration.
If you upgrade to 6.2.X you will also need to upgrade the PDM to the latest version. For the software upgrade process you will need a tftp server and upgrade using the command "copy tftp flash" or from monitor mode. Hope this helps!

 

[baddos]

Make sure you do a write memory before flashing the image. Any changes made to the running configuration will be saved to flash memory.

When you flash the image, you will need to reboot/restart the pix which looses the running configuration.

 

[jacare]

Also, I would use the TFTP server and a &quot;wr net <tftp-ip>:filename&quot; to save a binary of the config. Copy and paste &quot;wr t&quot; to notepad and save to a text file should also be done.

As far as the VPN, there is a wizard on PDM that is pretty cool and will configure it properly.

Remember that you cannot VPN from the same subnet you will be connecting to. To test VPN, you will have to be on a machine that can connect to the outside interface, but it is on a different subnet of the inside interface.

I had some home users with clients that could not VPN to their main sites because the DHCP server of their home DSL routers were leasing an IP of the same subnet that was used in their firms.

Also, if the PIX does not support reverse access. Meaning that once you VPN, you have only access to ALL the networks connected to your inside network, BUT the one you are using to VPN in, the outside subnet.

Again, I've customers that could not access the internet while VPNed, because the PIX was the gateway configured in the firm for internet access. If the firm's lan has a proxy server, it may work, never tried.

Good luck