topic Re: PIX 520 maximum config size in Network Security

PIX 520 maximum config size

scoe — Fri, 21 Feb 2020 07:31:30 GMT

PIX 520 that is configured using CSPM seems to have reached it's maximum config size. When trying to make a config change through CSPM it says there is not enough space for request.

When checking on the flash through the CLI....

pp1# show flashfs

flash file system: version:2 magic:0x12345679

file 0: origin: 0 length:1540152

file 1: origin: 1572864 length:1812007

file 2: origin: 0 length:0

file 3: origin: 3407872 length:4748324

file 4: origin: 8257536 length:280

pp1#

I beleive file 1 is the config and is 1812007 - more than what the max config size is supposed to be on pix 520 - According to the documentation the PIX 520 has max config size of 1Mbyte and PIX 525 has max config size of 2Mbyte.

1) Am I reading this correctly that my config is about 1.8Mbytes?

2) How can my config be bigger than 1Mbyte - the max for a PIX520?

3) Is it possible to re-organise the PIX flash to give more space for config?

4) If we change the PIX for a 525 will we double the space config

Answers to any of these questions would be much appreciated!

Re: PIX 520 maximum config size

nkhawaja — Thu, 22 Jul 2004 21:16:47 GMT

PIX Ver 6.2 and lower (ver 2 filesystem)

file 0: PIX binary image

file 1: startup config

file 2: IPSec key and certificate information

file 3: PDM image

file 4: filesystem record

PIX Ver 6.3 and higher (ver 3 filesystem)

file 0: PIX binary image

file 1: startup config

file 2: IPSec key and certificate information.

file 3: PDM image

file 4: Crashinfo (last saved traceback and show tech output)

file 5: filesystem record.

pdm-pix(config)# show flashfs

flash file system: version:3 magic:0x12345679

file 0: origin: 0 length:1941560 -PIX Binary Image

file 1: origin: 2621440 length:4909 -PIX Config

file 2: origin: 2752512 length:1917 -IPSec data

file 3: origin: 2883584 length:3126944 -PDM Binary Image

file 4: origin: 6029312 length:131072 -Crashinfo file

file 5: origin: 8257536 length:308 -Filesystem record

I think the length is in bytes. so your config reaching 1.8MB. I am not sure about the config size limit on 520 and 525. BUt i know that 2MB is limit (not sure if that is for 520 as well or not)

not sure how to reorganize, i dont think it is possible either. try to clean up the configs. CSPM uses revisions of ACLs. So try to login to pix and remove the revision ACL

Thanks

Nadeem

Re: PIX 520 maximum config size

scoe — Fri, 23 Jul 2004 13:16:48 GMT

Thanks Nadeem, but you haven't answered any of my questions.

Anyone else know?

Re: PIX 520 maximum config size

nkhawaja — Fri, 23 Jul 2004 16:12:32 GMT

1) Am I reading this correctly that my config is about 1.8Mbytes?

YES

2) How can my config be bigger than 1Mbyte - the max for a PIX520?

Not sure on this one, searched all over, but as far as I knew it was 2MB limit

3) Is it possible to re-organise the PIX flash to give more space for config?

No, you have to clear the whole flashfs ( i mean erase it and start from scratch)

4) If we change the PIX for a 525 will we double the space config

No, the limit is 2MB

Thanks

Nadeem

Re: PIX 520 maximum config size

jfawcett — Mon, 26 Jul 2004 09:08:04 GMT

Thanks Nadeem I am replying on behalf of Stuart.

On point No 3 is it possible if we erase the flash and if so how do we reorganise the flash file system.