topic Re: PIX reload in Network Security

PIX reload

pooria_koleyni — Mon, 11 Mar 2019 11:36:39 GMT

I have no experience workign with cisco PIX . we have a pix ont the netwrok that reloded. I want to know required commands to gather information that help to find root cause of problem

thx

Re: PIX reload

andyjames — Thu, 29 Nov 2007 13:00:56 GMT

Hello,

Once it has reloaded you will not get any information from it. It is erased during the reload process.

You can set up syslog to a server on the network if required to have the info if it happens again.

http://www.cisco.com/en/US/partner/products/hw/vpndevc/ps2030/products_tech_note09186a0080094030.shtml

That URL runs through the syslog setup, I use KIWI for the syslog daemon.

HTH.

Re: PIX reload

elparis — Thu, 29 Nov 2007 15:11:25 GMT

Hi Andy,

Right, one it's reloaded there's not much that can be collected to determine what happened. The "show version" command of the PIX lacks the reload reason, unlike the "show version" command of IOS.

One thing that I would suggest the original poster to try the "show crashinfo" command - if the PIX reloaded because of a software bug there is a chance a crashinfo file will exist, and the information in that file can be used to determine if the problem is caused by an existing bug (for which there may be a version with the fix) or by a new bug that requires further Cisco engagement.

Logging to a syslog server is always a good idea.

Hope this helps.

Cheers,

Eloy.-

Re: PIX reload

elparis — Thu, 29 Nov 2007 15:11:57 GMT

What PIX model and software version?

Re: PIX reload

elparis — Thu, 29 Nov 2007 15:18:16 GMT

By the way, the "show crashinfo" command was introduced in PIX software version 6.3(1). If the software version is < 6.3.x then the crash info is just dumped to the serial console. If there is no terminal connected to the serial console then this information is lost.