NJJimInHI
asked on
Need to Backup Cisco Pix 506E but the IOS has no dir command
I have a Cisco PIX 506e running firewall version 6.3(3) and I am trying to take a backup to tftp server, but the IOS has no dir command. Can someone point me in the right direction here? I need to take a good backup of this 506E as it is in service and I want to connect a second, remote 506E to it and establish an IPSEC VPN tunnel between the two. Of courese, I have to know I have a good backup of the in-service 506E before I begin testing. Many thanks in advance.
ASKER
Thanksk Kvistofta,
Backing up thios way, how would I restore from this text file, if need be?
Backing up thios way, how would I restore from this text file, if need be?
The easiest way is to "copy tftp startup-config" and then reboot the router.
Another way is to wipe the config ("write erase" and reload the router) and paste all config from the text file into the router(config)#-prompt of the console terminal. What you might miss then is to do "no shutdown" of default-shutdown interfaces.
/Kvistofta
Another way is to wipe the config ("write erase" and reload the router) and paste all config from the text file into the router(config)#-prompt of the console terminal. What you might miss then is to do "no shutdown" of default-shutdown interfaces.
/Kvistofta
ASKER
I tried:
The way to send your config to a tftp server is this command:
firewall#copy running-config tftp:
This command will prompt you of the ip-address to the tftp-server and the file name to write before sending the file.
But the IOS keeps coming back with usage suggestion for "copy".
Unable to save a copy of running-config to my tftp server with these instructions. Different commands possibly?
Thanks
The way to send your config to a tftp server is this command:
firewall#copy running-config tftp:
This command will prompt you of the ip-address to the tftp-server and the file name to write before sending the file.
But the IOS keeps coming back with usage suggestion for "copy".
Unable to save a copy of running-config to my tftp server with these instructions. Different commands possibly?
Thanks
Can you do it again and paste all output here?
/Kvistofta
/Kvistofta
ASKER
After successfully running "show running-config", I then tried the following, with the "Usage: results being returned fy the IOS.
:
firewall# copy running-config tftp:
Usage: copy capture:<capture-name> tftp://<location>/<pathname> [pcap]
copy http[s]://[<user>:<passwor d>@]<locat ion>[:<por t>]/<pathn ame>
flash[:[image | pdm]]
copy tftp[:[[//location][/pathn ame]]] flash[:[image | pdm]]
:
firewall# copy running-config tftp:
Usage: copy capture:<capture-name> tftp://<location>/<pathname> [pcap]
copy http[s]://[<user>:<passwor
flash[:[image | pdm]]
copy tftp[:[[//location][/pathn
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
JFrederick29 - Thanks, but as there is no "Dir" command in this IOS, how can I determine the file names I need to back up.?
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Just tested "write net" and "configure net" on a spare 506E and that works just fine. I'm going to "accept multiple solutions" in the hopes that you both share the points. Thanks for your help guys!
There is no "dir" command on that version of the PIX OS.
Try "show flashfs". It will list several files as follows:
"file 0:PIX Firewall binary image, where the .bin file is stored.
"file 1:PIX Firewall configuration data that you can view with the show config command.
"file 2:PIX Firewall datafile that stores IPSec key and certificate information.
"file 3:flashfRef: http://www.cisco.com/en/US/docs/security/pix/pix61/command/reference/df.htmls downgrade information for the show flashfs command.
Originally from: Ref: http://www.cisco.com/en/US/docs/security/pix/pix61/command/reference/df.html
You can copy the configuration to a tftpboot server with "write net" and it will ask you for the server IP address or name and the filename you want and tell you of success or failure.
There is no way to copy the IOS off of the unit to a TFTP server.
Try "show flashfs". It will list several files as follows:
"file 0:PIX Firewall binary image, where the .bin file is stored.
"file 1:PIX Firewall configuration data that you can view with the show config command.
"file 2:PIX Firewall datafile that stores IPSec key and certificate information.
"file 3:flashfRef: http://www.cisco.com/en/US/docs/security/pix/pix61/command/reference/df.htmls downgrade information for the show flashfs command.
Originally from: Ref: http://www.cisco.com/en/US/docs/security/pix/pix61/command/reference/df.html
You can copy the configuration to a tftpboot server with "write net" and it will ask you for the server IP address or name and the filename you want and tell you of success or failure.
There is no way to copy the IOS off of the unit to a TFTP server.
password: ****
firewall> enable
password: *****
firewall# show running-config
<A lot of outout>
<A lot of outout>
<A lot of outout>
firewall#
The way to send your config to a tftp server is this command:
firewall#copy running-config tftp:
This command will prompt you of the ip-address to the tftp-server and the file name to write before sending the file.
Best regards
Kvistofta