topic Re: Pix 515 cannot boot into the OS in Network Security

Pix 515 cannot boot into the OS

gilbertthor — Mon, 11 Mar 2019 11:53:29 GMT

I face the problem when i boot up the PIX 515e firewall, belows are the message which appear at my console hyperterminal.

Watchdog timeout failure! Please contact customer support.

PC SP STATE Runtime SBASE Stack Process

Hrd 001ecf11 00950334 00565bc0 10 0094f3ac 3812/4096 arp_timer

Lrd 00103710 009f35a4 005660a0 0 009f25b4 4080/4096 FragDBGC

Lrd 00103710 009ff85c 005660a0 0 009fe86c 4080/4096 dbgtrace

Lrd 00103710 00a0190c 005660a0 0 009ff91c 8176/8192 Logger

Hwe 003f6998 00a0495c 0055e7c0 0 00a029e4 8024/8192 tcp_fast

Hwe 003f6911 00a06a0c 0055e7c0 0 00a04a94 8024/8192 tcp_slow

Lrd 00103710 00b3d1f4 005660a0 0 00b3c204 4080/4096 xlate clean

Lrd 00103710 00b3e2a4 005660a0 0 00b3d2b4 4080/4096 uxlate clean

Mrd 00103710 00cd6684 00565c10 0 00cd4694 8176/8192 tcp_intercept_timer

_process

Lrd 00103710 00d82f6c 005660a0 0 00d81f7c 4080/4096 route_process

Hrd 002f45ac 00d83f94 00565bc0 50 00d8302c 3752/4096 PIX Garbage Collect

Hwe 0021a459 00d8e4c4 00565bd8 20 00d8a55c 15992/16384 isakmp_time_keepe

Lrd 00103710 00da8d04 005660a0 0 00da7d14 4080/4096 perfmon

Mrd 00103710 00dd3144 00565c10 0 00dd1154 8176/8192 IPsec timer handler

Hrd 003a8933 00de7b54 00565bc0 30 00de5c0c 7684/8192 qos_metric_daemon

Mrd 00103710 00e02714 00565c10 0 00dfe724 16368/16384 IP Background

Lrd 00103710 00eb5154 005660a0 0 00eb4164 4080/4096 pix/trace

Lrd 00103710 00eb6204 005660a0 0 00eb5214 4080/4096 pix/tconsole

Thank you

-Gilbert

Re: Pix 515 cannot boot into the OS

Collin Clark — Fri, 25 Jan 2008 15:05:31 GMT

Gilbert-

You should open a TAC Case for this.

Re: Pix 515 cannot boot into the OS

gilbertthor — Fri, 25 Jan 2008 16:51:50 GMT

Hi,

i think i already solved the problem, now the Pix is running well already.Thank for u advise.

-By the way i have the small project which will running, is regarding about the DMZ and vpn stuff, is it convenience for me to post the diagram and configuration on this forum?

-i got found some message after i solved the problem which previously i mentioned, pls refer to below:

Cisco Systems, Inc.

170 West Tasman Drive

San Jose, California 95134-1706

..outside interface address added to PAT pool

Cryptochecksum(unchanged): 2b846bba 456a6859 e2bc5702 d8f2a548

Cannot select private keyPlease Save before Reboot the PIX.

Do Not Enter If You Are Not Authorised Person. This is a Restricted Zone.

Type help or '?' for a list of available commands.

ppraipgpix>

Thank you

-Gilbert

Re: Pix 515 cannot boot into the OS

Collin Clark — Fri, 25 Jan 2008 16:56:06 GMT

Sure go ahead and post. I would create a new thread, that way others will see it and you will get more exposure to your issue.

Re: Pix 515 cannot boot into the OS

gilbertthor — Fri, 25 Jan 2008 17:00:36 GMT

Hi,

thanks let me generate the all diagram and config file and post to this forum.

By the way do u have any idea for what is the problem for this message as below:

Cisco Systems, Inc.

170 West Tasman Drive

San Jose, California 95134-1706

..outside interface address added to PAT pool

Cryptochecksum(unchanged): 2b846bba 456a6859 e2bc5702 d8f2a548

Cannot select private keyPlease Save before Reboot the PIX.

Do Not Enter If You Are Not Authorised Person. This is a Restricted Zone.

Type help or '?' for a list of available commands.

ppraipgpix>

Thank you

-Thor

Re: Pix 515 cannot boot into the OS

Collin Clark — Fri, 25 Jan 2008 17:09:38 GMT

Rebuild your SSH keys.

PIX(config)#hostname PIXOne

PIXOne(config)#domain-name mydomain.com

PIXOne(config)#ca generate rsa key 1024

PIXOne(config)#ssh time-out 60

PIXOne(config)#ssh 0.0.0.0 0.0.0.0 outside

PIXOne(config)#passwd your_password

PIXOne(config)#ca save all

PIXOne(config)#^Z

PIXOne#write memory

Re: Pix 515 cannot boot into the OS

gilbertthor — Fri, 25 Jan 2008 17:15:28 GMT

Hi,

Thanks i will test it out! i will post the DMZ project ASAP.

Thank you

Re: Pix 515 cannot boot into the OS

gilbertthor — Mon, 28 Jan 2008 02:43:00 GMT

Hi ceclark,

We got the project as show in the attachment.As u see that previously the DMZ DNS server and the Exchange server in the Lan were held at K.L Pix.

Now i move the DMZ DNS server and Exchange Server to PG PIX. The DNS server have a Trendmicro virus wall so the exchange server smtp port must allow to pass through.

The Attachment is the pre-configured which i move from K.L Pix to P.G Pix! pls give me advise is it workable.

Thanks

-Gilbert