Firewall Wizards: RE: Uploading config files to Pix 515

["Brandon Fetch" <getfetch1 () comcast net>]

If this has been answered - I apologize.

I think you need to do the following:

If the configuration you have on the TFTP server is the one you want your
firewall to load on startup then type this:

copy tftp %parameters% startup-config
reload <enter>

Or, if you want the configuration on the TFTP server to be placed into
memory and be running as soon as the copy is finished, then type this:

Copy tftp %parameters% running-config

Remember, if you run the second command, if you reboot the firewall, that
TFTP'ed configuration is dropped for the startup-config.  So remember to do
a 'copy running-config startup-config' before logging out of the firewall.

HTH,
Brandon

-----Original Message-----
From: firewall-wizards-admin () honor icsalabs com
[mailto:firewall-wizards-admin () honor icsalabs com]On Behalf Of Mike Meredith
Sent: Friday, February 06, 2004 3:19 AM
To: firewall-wizards () honor icsalabs com
Subject: Re: [fw-wiz] Uploading config files to Pix 515

On Thu, 05 Feb 2004 11:34:58 -0800, Michael H wrote:
> Sorry for such a rookie question, but I seem to be having some trouble
I'm in a similar position. I've figured out something, but I'd like a
better answer ...

> I can save config files all day long using a tftp server, but I can't
> for the life of me figure out how to get them back to the pix. I don't
> want them to merge so conf mem is not what I want right? I've tried
> conf net, but that doesn't seem to work or I'm doing it wrong.
Assuming you've configured a TFTP server (tftp-server inside 10.0.0.1
conf-file),

conf t
conf net :

Will merge the TFTPed configuration with the existing configuration. Not
what you want, but if you have :-

clear configure all

at the top of the TFTPed configuration file, it will work. It does drop
all connections when it's done so isn't ideal. If anyone has a better
method of doing it, I'd *love* to hear about it.

--
Mike Meredith, Senior Informatics Officer
University of Portsmouth: Hostmaster, Postmaster and Security
  Some people, when confronted with a problem, think ``I know, I'll use
  regular expressions.'' Now they have two problems.  -- Jamie Zawinski

_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards