Cisco Cisco ASA 5520 Adaptive Security Appliance Technical Manual
Read these documents in order to ensure that you are aware of new, changed and
deprecated commands:Release notes for the software version to which you plan to upgrade,
which can be found at "Cisco PIX Security Appliance Release Notes".
deprecated commands:Release notes for the software version to which you plan to upgrade,
which can be found at "Cisco PIX Security Appliance Release Notes".
4.
Plan to perform the migration during downtime. Although the migration is a simple two step
process, the upgrade of the PIX Security Appliance to 7.x is a major change and requires
some downtime.
process, the upgrade of the PIX Security Appliance to 7.x is a major change and requires
some downtime.
5.
customers only) .
6.
Components Used
The information in this document is based on these software and hardware versions:
ASA 5500 Series Security Appliances
●
PIX Security Appliance 515, 515E, 525, and 535
●
PIX Software versions 6.3, 7.0
●
The information in this document was created from the devices in a specific lab environment. All of
the devices used in this document started with a cleared (default) configuration. If your network is
live, make sure that you understand the potential impact of any command.
the devices used in this document started with a cleared (default) configuration. If your network is
live, make sure that you understand the potential impact of any command.
Conventions
Refer to the
for more information on document conventions.
Manual Configuration Conversion
With the manual conversion process, you use a text editor to go through your configuration line-
by-line and convert PIX-specific commands to ASA commands.
by-line and convert PIX-specific commands to ASA commands.
Manual conversion of the PIX configuration to an ASA configuration gives you the most control
over the conversion process. However, the process is time consuming and does not scale well if
you must make more than one conversion.
over the conversion process. However, the process is time consuming and does not scale well if
you must make more than one conversion.
These three steps must be completed in order to migrate from PIX to ASA:
Upgrade the PIX software version to 7.x.
1.
Convert interface names from Cisco PIX software 7.0 to Cisco ASA Format.
2.
Copy the PIX software 7.0 configuration to Cisco ASA 5500.
3.
Upgrade the PIX Software Version to 7.x
Before you start the actual upgrade process, complete these steps:
Issue the show running-config or write net command in order to save the PIX current
configuration to a text file or a TFTP server.
configuration to a text file or a TFTP server.
1.
Issue the show version command in order to verify the requirements, such as RAM. Also,
save the output of this command to a text file. If you need to revert back to an older version
of the code, you can potentially need the original activation key.
save the output of this command to a text file. If you need to revert back to an older version
of the code, you can potentially need the original activation key.
2.