Link to home
Start Free TrialLog in
Avatar of Shen
ShenFlag for United States of America

asked on

asa 5505 to replace old pix506e vpn/firewall

I am trying to replace a pix 505e vpn/firewall with the asa5505. Could the configuration file from the pix 506e be loaded into the asa 5505. If so, please provide detail steps.
Avatar of Garry Glendown
Garry Glendown
Flag of Germany image

General answer: no.
Less general answer (educated guess, though I haven't tried it - only did upgrades on 515 before): Depending on the amount of memory, you may be able to upgrade the 506 to a software release from the 7.x train, which would convert the old config to a newer style. Running the same (or similar) version on the ASA, you could copy&paste relevant parts (while taking care to modify the interface names etc.) to the ASA, then upgrade the ASA to the release you want/need. Not sure if it's worth the hassle, though. Configuring the ASA from scratch may be the better choice, for one you get rid of unused stuff, plus you learn your way around the new system.
Avatar of Shen

ASKER

Thnak you for your response. I agree with you. I read about a conversion tool, but you have to upgrade the pix506 first to version 7 as you stated and then it may not work well.  I will do it from scracth.  

Question - Our inside network is on the 10.100.1.xx, the asa come with 192.168.1.x. For me to change the inside network interface to 10.100.1.254, I could only do it through the console connection?
ASKER CERTIFIED SOLUTION
Avatar of Garry Glendown
Garry Glendown
Flag of Germany image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial