Link to home
Start Free TrialLog in
Avatar of NJJimInHI
NJJimInHI

asked on

Need to Backup Cisco Pix 506E but the IOS has no dir command

I have a Cisco PIX 506e running firewall version 6.3(3) and I am trying to take a backup to tftp server, but the IOS has no dir command.  Can someone point me in the right direction here?  I need to take a good backup of this 506E as it is in service and I want to connect a second, remote 506E to it and establish an IPSEC VPN tunnel between the two.  Of courese, I have to know I have a good backup of the in-service 506E before I begin testing.  Many thanks in advance.
Avatar of Jimmy Larsson, CISSP, CEH
Jimmy Larsson, CISSP, CEH
Flag of Sweden image

The easiest way to get a backup of the current configuration is to issue the "show running-config"-command in enable-mode and copy all output to a textfile. Like this:

password: ****
firewall> enable
password: *****
firewall# show running-config
<A lot of outout>
<A lot of outout>
<A lot of outout>
firewall#

The way to send your config to a tftp server is this command:
firewall#copy running-config tftp:
This command will prompt you of the ip-address to the tftp-server and the file name to write before sending the file.

Best regards
Kvistofta
Avatar of NJJimInHI
NJJimInHI

ASKER

Thanksk Kvistofta,

Backing up thios way, how would I restore from this text file, if need be?
The easiest way is to "copy tftp startup-config" and then reboot the router.

Another way is to wipe the config ("write erase" and reload the router) and paste all config from the text file into the router(config)#-prompt of the console terminal. What you might miss then is to do "no shutdown" of default-shutdown interfaces.

/Kvistofta
I tried:
The way to send your config to a tftp server is this command:
firewall#copy running-config tftp:
This command will prompt you of the ip-address to the tftp-server and the file name to write before sending the file.

But the IOS keeps coming back with usage suggestion for "copy".

Unable to save a copy of running-config to my tftp server with these instructions.  Different commands possibly?

Thanks
Can you do it again and paste all output here?

/Kvistofta
After successfully running "show running-config", I then tried the following, with the "Usage: results being returned fy the IOS.
:
firewall# copy running-config tftp:
Usage:  copy capture:<capture-name> tftp://<location>/<pathname> [pcap]
        copy http[s]://[<user>:<password>@]<location>[:<port>]/<pathname>
                flash[:[image | pdm]]
        copy tftp[:[[//location][/pathname]]] flash[:[image | pdm]]
ASKER CERTIFIED SOLUTION
Avatar of JFrederick29
JFrederick29
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
JFrederick29 - Thanks, but as there is no "Dir" command in this IOS, how can I determine the file names I need to back up.?
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Just tested "write net" and "configure net" on a spare 506E and that works just fine.  I'm going to "accept multiple solutions" in the hopes that you both share the points.  Thanks for your help guys!
There is no "dir" command on that version of the PIX OS.

Try "show flashfs".  It will list several files as follows:

"file 0:PIX Firewall binary image, where the .bin file is stored.
"file 1:PIX Firewall configuration data that you can view with the show config command.
"file 2:PIX Firewall datafile that stores IPSec key and certificate information.
"file 3:flashfRef:  http://www.cisco.com/en/US/docs/security/pix/pix61/command/reference/df.htmls downgrade information for the show flashfs command.

Originally from:  Ref:  http://www.cisco.com/en/US/docs/security/pix/pix61/command/reference/df.html

You can copy the configuration to a tftpboot server with "write net" and it will ask you for the server IP address or name and the filename you want and tell you of success or failure.

There is no way to copy the IOS off of the unit to a TFTP server.