topic Re: ASDM Help in Network Security

ASDM Help

johnnymac — Mon, 11 Mar 2019 10:07:32 GMT

Hi,

I'm trying to get the ASDM going on a PIX 515e. this is the output of a sh flash

Directory of flash:/

4 -rw- 10482 04:26:56 Oct 13 2006 downgrade.cf

7 -rw- 5107768 04:27:59 Oct 13 2006 image.bin

11 -rw- 8202240 04:35:05 Oct 13 2006 pix721.bin

Now i think i need the asdm-522.bin which i have but there's not enough space.

As far as i can see there are two IOS images (image and PIX) and from this config line

boot system flash:/pix721.bin

I assume this pix is booting from the pix.721.bin file not image.bin.

What i want to is erase the flash, tftp back the the .cfg and the .bin and then add asdm-522.bin.

My problem is I can't back up the image.bin file

%Error copying flash:/image.bin (Inappropriate file type or format)

Can anyone advise? I don't want to get into a situation where i can't roll back.

Also can i confirm i'm on the right track with the ASDM?

Here's the show version

Cisco PIX Security Appliance Software Version 7.0(2)

Compiled on Fri 15-Jul-05 22:55 by builders

System image file is "Unknown, monitor mode tftp booted image"

Config file at boot was "startup-config"

pix up 49 days 17 hours

Hardware: PIX-515E, 64 MB RAM, CPU Pentium II 433 MHz

Flash E28F128J3 @ 0xfff00000, 16MB

BIOS Flash AM29F400B @ 0xfffd8000, 32KB

0: Ext: Ethernet0 : address is 000c.3035.a10a, irq 10

1: Ext: Ethernet1 : address is 000c.3035.a10b, irq 11

2: Ext: Ethernet2 : address is 00d0.b720.c045, irq 11

Licensed features for this platform:

Maximum Physical Interfaces : 3

Maximum VLANs : 10

Inside Hosts : Unlimited

Failover : Disabled

VPN-DES : Enabled

VPN-3DES-AES : Disabled

Cut-through Proxy : Enabled

Guards : Enabled

URL Filtering : Enabled

Security Contexts : 0

GTP/GPRS : Disabled

VPN Peers : Unlimited

This platform has a Restricted (R) license.

Serial Number: 807076662

Running Activation Key: xxx

Configuration last modified by enable_15 at 01:41:41.131 UTC Tue May 1 2007

Kind regards

J Mack

Re: ASDM Help

johnnymac — Tue, 01 May 2007 10:39:17 GMT

Does anyone think this could be because image.bin has been deleted but the PIX not Reloaded?

Re: ASDM Help

mark.j.hodge — Tue, 01 May 2007 12:25:59 GMT

I agree a reload is required.

I suspect that the new software has beel loaded, and the PIX instructed to use it at next reboot. But the rebbot hasn't been completed.

The image on flash is named 721.bin, which implies version 7.2(1)- The file *could* be incorrectly named.

The booted system is running 7.0(2)

I recomend that you upgrade again, place the updated image in image.bin, redirect the boot command and remove 721.bin.

IMHO it is better to keep PIX image named generic

Re: ASDM Help

johnnymac — Wed, 02 May 2007 06:24:00 GMT

Hi,

Thanks, after a reboot ios has indeed changed to 7.2.1. I still cannot tftp image.bin? Is this file likely to be doing anything or do you should i assume it's safe to get rid of so i can free space to load the asdm.bin file.

Re: ASDM Help

Jon Marshall — Wed, 02 May 2007 07:10:47 GMT

Hi Johnny

Excerpt from ASA configuration doc.

=============================================

By default, the security appliance boots the first application image it finds in internal Flash memory. It also boots the first ASDM image it finds in internal Flash memory, or of none exists there, then in external Flash memory. If you have more than one image, you should specify the image you want to boot. In the case of the ASDM image, if you do not specify the image to boot, even if you have only one image installed, then the security appliance inserts the asdm image command into the running configuration. To avoid problems with Auto Update (if configured), and to avoid the image search at each startup, you should specify the ASDM image you want to boot in the startup configuration.

?To configure the application image to boot, enter the following command:

hostname(config)# boot system "url"

=============================================

This would suggest that as long as you are sure that your boot statement in your config matches exactly the pix7.2.1 image in flash then you should be able to delete the image file.

HTH

Jon