Replacing 501 with a 515

Replacing 501 with a 515

NewsGroups | Search | Tools
 comp.dcom.sys.cisco  Post an article  get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content  add this group's latest topics to your Google content  YahooMyWeb Yahoo!  Google Google  Windows Live Favorites Windows Live  del.icio.us del.icio.us  digg digg  Add to Netscape Netscape
Subject Author Date
Replacing 501 with a 515 Bob 02-05-2007
Posted by Bob on February 5, 2007, 7:25 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Hi,

We want to replace our 501 PIX with a 515 PIX, in order to give
greater throughput over our VPN to the 515's in our data centres.

Both PIX's are running the same IOS 6.3(4) with identical line for
line confgigs.
I copy and pasted the entire configuration from the 501 to the 515.
Most things on the PIX work, internet access, VPN's etc.
However I am unable to ftp in too our ftp server, and our VIOP phone
system stops working, by plugging the 501 back in everything works
fine again.

If the configs are identical why would some of the services work and
not others?

Or is there something I am missing because they are different
hardware?

regards
Paul Roberts.


Posted by Brian V on February 5, 2007, 8:15 am
If you were  Registered and logged in, you could reply and use other advanced thread options

> Hi,
>
> We want to replace our 501 PIX with a 515 PIX, in order to give
> greater throughput over our VPN to the 515's in our data centres.
>
> Both PIX's are running the same IOS 6.3(4) with identical line for
> line confgigs.
> I copy and pasted the entire configuration from the 501 to the 515.
> Most things on the PIX work, internet access, VPN's etc.
> However I am unable to ftp in too our ftp server, and our VIOP phone
> system stops working, by plugging the 501 back in everything works
> fine again.
>
> If the configs are identical why would some of the services work and
> not others?
>
> Or is there something I am missing because they are different
> hardware?
>
> regards
> Paul Roberts.
>

Are you sure the VPN's are working? If you just copy and pasted from a show
config there is no way they could be working. The crypto keys are not
displayed in a show config. The only way to get them clear text is to do a
wr net to a tftp server on the lan. You could then copy and paste that
config in since the keys would be clear.

Next option would be to post both configs and we'll take a look.



Posted by Bob on February 5, 2007, 9:49 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Hi,

Yeah I did a write net to get the crypto keys, so the VPN's are fine.
I used win merge to the check the configs so I know they are line for
line the same.

what sections would you need to look at?

Thanks
Regards
Paul Roberts.


Posted by mcaissie on February 5, 2007, 11:59 am
If you were  Registered and logged in, you could reply and use other advanced thread options
You may need to clear the ARP cache of the servers that are not reachable.

If they still have the PIX 501 MAC address in their ARP cache it will not
work


> Hi,
>
> Yeah I did a write net to get the crypto keys, so the VPN's are fine.
> I used win merge to the check the configs so I know they are line for
> line the same.
>
> what sections would you need to look at?
>
> Thanks
> Regards
> Paul Roberts.
>



Posted by Bob on February 5, 2007, 12:21 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Ah Ha, could point!

Do you know how to clear the arp cache on Linux?

save me googling it...

Thanks
Regards
Paul Roberts


Similar ThreadsPosted
ASA replacing PIX August 19, 2006, 10:16 pm
Replacing a PIX 515E with a PIX 515 November 5, 2005, 5:44 am
Replacing Flash Memory June 29, 2007, 4:35 am
Replacing an old 4700 router October 17, 2008, 7:04 am
PIX issue after replacing new public IP addresses March 14, 2005, 1:02 pm
Replacing ISP managed router in office November 29, 2006, 2:09 pm
Replacing configurations with encrypted passwords February 27, 2008, 4:16 pm
Replacing a startup-config on a Cisco PIX June 13, 2008, 12:07 am
Replacing pix515 with ASA5510 results into MTU problems. May 10, 2006, 9:28 am
Replacing compact flash card on Cisco Concentrator September 14, 2006, 11:25 am

other useful resources:
The Federal Communications Commission (FCC)
Telecommunications Industry Association
Electronic and Software Security Products and Services
International Telecommunication Union

Custom CGI Perl and PHP programming by 1-Script.com

Contact Us | Privacy Policy
The site map in XML format XML site map