topic Re: PIX 506 Reset in Network Security

PIX 506 Reset

rm1 — Fri, 21 Feb 2020 08:26:35 GMT

Trying to reset to factory defaults due forgeten password, keep get an error?

Any ideas why?

Thnx

monitor> address 192.168.123.200

address 192.168.123.200

monitor> gateway 192.168.123.254

gateway 192.168.123.254

monitor> server 192.168.123.100

server 192.168.123.100

monitor> file np63.bin

file np63.bin

monitor> tftp

tftp np63.bin@192.168.123.100 via 192.168.123.254

TFTP failed (return:-12 arg:0x0)

monitor> ping 192.168.123.100

Sending 5, 100-byte 0x3f29 ICMP Echoes to 192.168.123.100, timeout is 4 seconds:

!!!!!

Success rate is 100 percent (5/5)

monitor> inerface 1

Invalid or incorrect command. Use 'help' for help.

monitor> interface 1

0: i8255X @ PCI(bus:0 dev:13 irq:11)

1: i8255X @ PCI(bus:0 dev:14 irq:10)

Using 1: i82559 @ PCI(bus:0 dev:14 irq:10), MAC: 0004.9ad0.fd7f

monitor> trace

trace on

monitor> tftp

tftp np63.bin@192.168.123.100 via 192.168.123.254<3><3><3><3><3><3><3><3><3><3>AAAAAAAAAAA<5><5><5><5><5><5><5><5><5><5><5><5><5><5><5><5><5><5><5><5><5><5><5><5><5><5><5><5><5><5><5><5><5><5><5

TFTP failed (return:-12 arg:0x0)

monitor>

Re: PIX 506 Reset

jmia — Thu, 06 Oct 2005 04:50:58 GMT

In configuration mode:

configure factory-default

..Follow the on screen instructions...

Hope this helps, and please rate post if it does as it may help others too.

Jay

Re: PIX 506 Reset

Patrick Iseli — Thu, 06 Oct 2005 13:30:33 GMT

Factory config looks like this:

interface ethernet0 auto

interface ethernet1 auto

nameif ethernet0 outside security0

nameif ethernet1 inside security100

hostname pixfirewall

fixup protocol dns maximum-length 512

fixup protocol ftp 21

fixup protocol h323 h225 1720

fixup protocol h323 ras 1718-1719

fixup protocol http 80

fixup protocol rsh 514

fixup protocol rtsp 554

fixup protocol sip 5060

fixup protocol sip udp 5060

fixup protocol skinny 2000

fixup protocol smtp 25

fixup protocol sqlnet 1521

fixup protocol tftp 69

names

pager lines 24

mtu outside 1500

mtu inside 1500

mtu intf2 1500

no ip address outside

ip address inside 192.168.1.1 255.255.255.0

no ip address intf2

ip audit info action alarm

ip audit attack action alarm

pdm logging informational 100

pdm history enable

arp timeout 14400

timeout xlate 3:00:00

timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h225 1:00:00

timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:00

timeout uauth 0:05:00 absolute

aaa-server TACACS+ protocol tacacs+

aaa-server TACACS+ max-failed-attempts 3

aaa-server TACACS+ deadtime 10

aaa-server RADIUS protocol radius

aaa-server RADIUS max-failed-attempts 3

aaa-server RADIUS deadtime 10

aaa-server LOCAL protocol local

http server enable

http 192.168.1.0 255.255.255.0 inside

no snmp-server location

no snmp-server contact

snmp-server community public

no snmp-server enable traps

floodguard enable

telnet timeout 5

ssh timeout 5

console timeout 0

dhcpd address 192.168.1.2-192.168.1.254 inside

dhcpd lease 3600

dhcpd ping_timeout 750

dhcpd auto_config outside

dhcpd enable inside

terminal width 80

To erase the config use:

write erase

reload

To your TFTP problem:

Have you downloaded the PIX OS Image in BINARY mode ?

Otherwise the image get corrupted.

sincerely

Patrick

Re: PIX 506 Reset

rmurdoch — Thu, 06 Oct 2005 21:44:40 GMT

How do you get into config mode whenyour locked out?

Thnx

Re: PIX 506 Reset

jakob.langgaard — Fri, 07 Oct 2005 12:03:42 GMT

Hi ..

I understandyour second question on how to erase the config when you are locked out :-))) that is tricky.

So back to your problem:

- Are you 100% sure that the tftp server is working ?

can you test it withan tftp client from another pc ?

Otherwise I have no clue, since your commands are fine (very simple) ..

/Jakob

Re: PIX 506 Reset

bobd — Fri, 07 Oct 2005 15:54:59 GMT

I've ran into situations where I had to disable logging and progress tracking on the tftp server for the PiX to download properly in monitor mode.

Bob

Re: PIX 506 Reset

rmurdoch — Fri, 07 Oct 2005 19:33:36 GMT

TFTP was the issue had to use the following software and it work...http://perso.wanadoo.fr/philippe.jounin/download/tftpd32e.zip

Followed the Cisco doc and reset the password...

Thanks guys..!

PS I tried FTP to/from IIS6 and a few other vendors..didn't work only the above did.

Re: PIX 506 Reset

rpathani — Sun, 09 Oct 2005 09:49:47 GMT

Make sure you use tftpd32 tftp server form:

http://tftpd32.jounin.net

(File: tftpd32.280.zip)

Incase using windows-xp SP2, make sure you do not have windows firewall turned on and tftp server up and running and pointing to np63.bin file.

If your Pix is running 6.3 code then you can first try with np63.in else at times this dosen't work then you can use np62.bin to try with that.

make sure you do not have two different tftp servers installed/running on your system.

-Most important, i notice you using "gateway"; try avoiding gateway command while doing password recovery and make sure to connect the tftp server host directly to your pix inside interface. I'm sure this would fix the issue and recover the password for you.

Rahul Pathania

rpathani@cisco.com

Re: PIX 506 Reset

jackko — Sun, 09 Oct 2005 11:11:46 GMT

just a suggestion of tftp server software.

it's a freeware and very user friendly, namely pumpkin.

Re: PIX 506 Reset

rpathani — Sun, 09 Oct 2005 12:18:56 GMT

Yes, it is absolutely freeware and recommended by us.

Re: PIX 506 Reset

jakob.langgaard — Mon, 10 Oct 2005 05:32:26 GMT

I will give it a try, but my favourite has till now been 3coms combined tftp/ftp/syslog program .. freeware and very small footprint 🙂

Official version (not updated since 1999)

http://support.3com.com/software/utilities_for_windows_32_bit.htm

Unofficial version:

http://www.governmentsecurity.org/forum/index.php?showtopic=4146