Cisco PIX Firewall Backup and Restore

This topic outlines the procedures necessary to backup and restore configuration information for the Cisco PIX Firewall.

Backing up Configuration Information Using Floppy Disk Drives

To back up configuration information on a floppy disk (write-floppy), complete the following tasks in the privileged mode.

Note: Only one copy of the configuration can be stored per floppy disk:

1. Ensure that a disk is in the floppy drive and verify that the disk is formatted in DOS.

2. Specify that the configuration is to be written to the floppy drive.

Example

The following example copies a configuration file from the PIX to a floppy disk:

PIX# write floppy

Building configuration...

[OK]





Note: A file name specification is not required because a default name is used.

Restoring Configuration Information Using Floppy Disk Drives

To restore configuration information from a floppy disk (read-floppy drive), and complete the following tasks in the privileged mode:

1. Verify that a disk is in the floppy drive.

2. Specify that the configuration is to be retrieved from the floppy drive.

Example

The following example restores a configuration file from a floppy disk:

PIX# config floppy

Cryptochecksum(unchanged): be224398 ac3ba233 23ab6543 4cde6ff2

Config OK

Note: A filename specification is not required because a default name is used.

Backing up Configuration Information Using TFTP

To backup configuration information on a TFTP network server (write-TFTP), complete the following tasks in the privileged mode:

1. Specify the TFTP server IP address, directory, and configuration file.

2. Specify that the configuration is to be written to the remote TFTP server.

Example

The following example writes the configuration file to a TFTP server:

PIX#tftp-server 10.1.1.2 /pixfirewall/config/new_config

PIX#write net :

TFTP write '/pixfirewall/config/new_config' at 10.1.1.2 on interface 1 [OK}

Note: Optionally, you can use the write net 10.1.1.12:/pixfirewall/config/new_config command to accomplish the TFTP write.

Restoring Configuration Information Using TFTP

To restore configuration information from a TFTP network server (read-TFTP), complete the following tasks in the privileged mode:

1. Specify the TFTP server IP address, directory, and configuration file.

2. Specify that the configuration file is to be retrieved from the remote TFTP server.

Example

The following example retrieves the configuration file from a TFTP server:

PIX#tftp-server 10.1.1.2 /pixfirewall/config/new_config

PIX#config net :

[OK}

Note: Optionally, you can use the config net 10.1.1.12:/pixfirewall/config/new_config command to accomplish the TFTP read.

Legal Information