Prev: Routing between interfaces on a MW-ESW-16
Next: storm-control question
From: Rob on 25 Mar 2010 05:21
Jacques Virchaux <jacques.virchaux_NOSPAM_(a)epfl.ch> wrote:
> Rob a écrit :
>
>> is there anyway to replace and ASA5505 config file with a config.txt or
>> other format, I have to setup 10 ASA, all the same config except some IPs
>> and So I m looking for a quick way to do that?
>
> You can do it via the console or management port :
>
> ciscoasa# configure term
> ... >>> your configuration file to paste here <<<
> ciscoasa(config)# ^Z
> ciscoasa# write memory
> ciscoasa# reload
>
> The configuration file (you get it from a show running-configuration)
> can be edited for each ASA with the correct parameters. Be carefully with
> some hidden items (****).

This method has the same disadvantage as using "copy ... running-config".

That is, when the existing config on your box has some settings and the
config you try to load assumes they are set to default values, the merge
of settings will not cure this. The setting remains.

Often the first apparent problem when you try to do this is that the box
has all interfaces set to "shutdown" and after the merging of the external
config this remains so.

That is why I prefer copying to startup-config and then reloading.
Then, you don't have that problem.
From: Morph on 25 Mar 2010 05:31
In the message <4baab62a$1(a)news.sentex.net> Rob wrote:

| "Morph" <morph.news(a)g.m.a.i.l> wrote in message
| news:vs3lq5da3h5620kv8k2bht80j2hka7vcq2(a)4ax.com...
| > In the message <4baa7480$1(a)news.sentex.net> Rob wrote:
| >
| > | Hi there
| > | is there anyway to replace and ASA5505 config file with a config.txt or
| > | other format, I have to setup 10 ASA, all the same config except some
| > IPs
| > | and So I m looking for a quick way to do that?
| > | Rob
| >
| > http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a008072142a.shtml
| > PIX/ASA: Backup and Restore the Security Appliance Configuration Files
| > Using TFTP Server
|
| thanks but looks like all the solutions merging tftp server's cofig file
| to running-config, how can I replace it totaly?

Copy to startup config.
From: Brian V on 25 Mar 2010 06:54

"Rob" <nomail(a)example.com> wrote in message
news:slrnhqm9p4.p06.nomail(a)xs8.xs4all.nl...
> Rob <Rob(a)hotmail.com> wrote:
>>
>>
>> "Morph" <morph.news(a)g.m.a.i.l> wrote in message
>> news:vs3lq5da3h5620kv8k2bht80j2hka7vcq2(a)4ax.com...
>>> In the message <4baa7480$1(a)news.sentex.net> Rob wrote:
>>>
>>> | Hi there
>>> | is there anyway to replace and ASA5505 config file with a config.txt
>>> or
>>> | other format, I have to setup 10 ASA, all the same config except some
>>> IPs
>>> | and So I m looking for a quick way to do that?
>>> | Rob
>>>
>>> http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a008072142a.shtml
>>> PIX/ASA: Backup and Restore the Security Appliance Configuration Files
>>> Using TFTP Server
>>
>> thanks but looks like all the solutions merging tftp server's cofig
>> file
>> to running-config, how can I replace it totaly?
>

You can also just put the config in to a text file, edit it however you need
on a per site basis via notepad, copy it to the flash and use the "boot
config disk0:/filename.text"

From: Tilman Schmidt on 27 Mar 2010 16:22
Am 25.03.2010 10:11 schrieb Jacques Virchaux:
> You can do it via the console or management port :
>
> ciscoasa# configure term
> ... >>> your configuration file to paste here <<<
> ciscoasa(config)# ^Z
> ciscoasa# write memory
> ciscoasa# reload
>
> The configuration file (you get it from a show running-configuration)
> can be edited for each ASA with the correct parameters. Be carefully with
> some hidden items (****).

There are many cases where that will not work.

The simplest and most frequent one: you cannot change the internal
IP address of an ASA that has dhcpd enabled that way. First the
"ip address" command will be rejected because it conflicts with
the old dhcp address range, and then the subsequent "dhcpd address"
command will be rejected because it conflicts with the as yet
unchanged interface address.

HTH
T.
First  |  Prev  | 
Pages: 1 2
Prev: Routing between interfaces on a MW-ESW-16
Next: storm-control question