Solved

Need to Backup Cisco Pix 506E but the IOS has no dir command

Posted on 2010-11-19
10
1,231 Views
Last Modified: 2012-05-10
I have a Cisco PIX 506e running firewall version 6.3(3) and I am trying to take a backup to tftp server, but the IOS has no dir command.  Can someone point me in the right direction here?  I need to take a good backup of this 506E as it is in service and I want to connect a second, remote 506E to it and establish an IPSEC VPN tunnel between the two.  Of courese, I have to know I have a good backup of the in-service 506E before I begin testing.  Many thanks in advance.
0
Comment
Question by:NJJimInHI
  • 5
  • 4
10 Comments
 
LVL 17

Expert Comment

by:Kvistofta
Comment Utility
The easiest way to get a backup of the current configuration is to issue the "show running-config"-command in enable-mode and copy all output to a textfile. Like this:

password: ****
firewall> enable
password: *****
firewall# show running-config
<A lot of outout>
<A lot of outout>
<A lot of outout>
firewall#

The way to send your config to a tftp server is this command:
firewall#copy running-config tftp:
This command will prompt you of the ip-address to the tftp-server and the file name to write before sending the file.

Best regards
Kvistofta
0
 

Author Comment

by:NJJimInHI
Comment Utility
Thanksk Kvistofta,

Backing up thios way, how would I restore from this text file, if need be?
0
 
LVL 17

Expert Comment

by:Kvistofta
Comment Utility
The easiest way is to "copy tftp startup-config" and then reboot the router.

Another way is to wipe the config ("write erase" and reload the router) and paste all config from the text file into the router(config)#-prompt of the console terminal. What you might miss then is to do "no shutdown" of default-shutdown interfaces.

/Kvistofta
0
 

Author Comment

by:NJJimInHI
Comment Utility
I tried:
The way to send your config to a tftp server is this command:
firewall#copy running-config tftp:
This command will prompt you of the ip-address to the tftp-server and the file name to write before sending the file.

But the IOS keeps coming back with usage suggestion for "copy".

Unable to save a copy of running-config to my tftp server with these instructions.  Different commands possibly?

Thanks
0
 
LVL 17

Expert Comment

by:Kvistofta
Comment Utility
Can you do it again and paste all output here?

/Kvistofta
0
What Security Threats Are You Missing?

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

 

Author Comment

by:NJJimInHI
Comment Utility
After successfully running "show running-config", I then tried the following, with the "Usage: results being returned fy the IOS.
:
firewall# copy running-config tftp:
Usage:  copy capture:<capture-name> tftp://<location>/<pathname> [pcap]
        copy http[s]://[<user>:<password>@]<location>[:<port>]/<pathname>
                flash[:[image | pdm]]
        copy tftp[:[[//location][/pathname]]] flash[:[image | pdm]]
0
 
LVL 43

Accepted Solution

by:
JFrederick29 earned 125 total points
Comment Utility
With PIX 6.3, use the following to backup the configuration:

write net 10.10.10.100:pix

Where 10.10.10.100 is the IP of the TFTP server and "pix" is the filename.

Use the "configure net" command to restore the configuration to the PIX.

configure net 10.10.10.100:pix
0
 

Author Comment

by:NJJimInHI
Comment Utility
JFrederick29 - Thanks, but as there is no "Dir" command in this IOS, how can I determine the file names I need to back up.?
0
 
LVL 17

Assisted Solution

by:Kvistofta
Kvistofta earned 125 total points
Comment Utility
There is no "file name" to back up. "writ net 10.10.10.100:pix" will send the current configuration to the tftp-server 10.10.10.100 and write it to file name "pix" on the server. You dont have to specify a file name on the firewall, "write net" will just take the current running-config which is in memory.

Best regards
Kvistofta
0
 

Author Comment

by:NJJimInHI
Comment Utility
Just tested "write net" and "configure net" on a spare 506E and that works just fine.  I'm going to "accept multiple solutions" in the hopes that you both share the points.  Thanks for your help guys!
0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

Suggested Solutions

This article assumes you have at least one Cisco ASA or PIX configured with working internet and a non-dynamic, public, address on the outside interface. If you need instructions on how to enable your device for internet, or basic configuration info…
If you use NetMotion Mobility on your PC and plan to upgrade to Windows 10, it may not work unless you take these steps.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now