topic Pix 515E FO Rebooting problem in Network Security

Pix 515E FO Rebooting problem

m.belateche — Mon, 11 Mar 2019 10:59:37 GMT

The Pix 516E with a FO license, fails to load the pix image from the flash. I can enter the monitor mode, configure the settings to download a new image from from a Tftp server, but nothing happens cannot even ping the tftp server. See attached debug output.

Re: Pix 515E FO Rebooting problem

JORGE RODRIGUEZ — Sun, 19 Aug 2007 21:47:28 GMT

hi, looking at your debug text this is what is wrong.

You have

monitor>interface 1 -------> pix inside interface#

monitor>address 10.0.0.155 ---> this should be address of PIX interface1

monitor>server 10.0.0.155 ---> tftp server address

this is why you cannot ping .

enter as follows:

monitor>interface 1

monitor>address x.x.x.x ----> address of PIX inside interface

monitor>server x.x.x.x ----> address of tftp server

then try ping the tftp server, if successful proceed with upgrade.

ensure new code is in root of tftp server.

question:

are you currently running 6.x code? I see you are trying upgrading to 7.x

ensure you meet all HW requirements for 7.x on your pix. Refer to this

page for information:

http://www.cisco.com/cgi-bin/tablebuild.pl/pix

memory upgrade for 515 specifications before going to 7.x code.

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/prod_bulletin0900aecd8023c8d4.html

HTH

Jorge

Re: Pix 515E FO Rebooting problem

purohit_810 — Mon, 20 Aug 2007 11:42:42 GMT

You should again put old IOS and boot the pix once.

Once pix will boot by old IOS, upgrade it after new IOS.

Follow URL: http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a00804708d8.shtml

There are also another URL:

How can you upgrade PIX appliance by Monitor MODE:

URL: http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a00804708d8.shtml#t3

Regards,

Dharmesh Purohit

Re: Pix 515E FO Rebooting problem

rigoberto.cintron — Tue, 21 Aug 2007 16:41:48 GMT

Just make sure you use a different IP address in the PIX interface. Right now you are putting the same IP address for the PIX interface and the TFTP server. Those addresses should be different.

Re: Pix 515E FO Rebooting problem

m.belateche — Wed, 22 Aug 2007 13:04:26 GMT

Have put the correct addresses enabled icmp debug. initiated a ping but with no result. The pix FO does not even attempt to ping the remote server. Could this be a hardware problem?

monitor> address 10.0.0.154

address 10.0.0.154

monitor> gateway 10.0.0.155

gateway 10.0.0.155

monitor> server 10.0.0.155

server 10.0.0.155

monitor> trace 10.0.0.155

trace on

monitor> ping 10.0.0.155

Sending 5, 100-byte 0x8468 ICMP Echoes to 10.0.0.155, timeout is 4 seconds:

Re: Pix 515E FO Rebooting problem

JORGE RODRIGUEZ — Wed, 22 Aug 2007 14:16:05 GMT

did you do interface 1 as this is your inside interface

e.g

monitor>interface 1

after you define interface do the rest of the script and try again.

[EDIT]

is your tftp server also a gateway?

again, as long your tftp server is in the inside 10.0.0.0 subnet your script you be

monitor>interface 1

monitor>addres 10.0.0.154

monitor>gateway 10.0.0.154

monitor>server 10.0.0.155

Re: Pix 515E FO Rebooting problem

JORGE RODRIGUEZ — Wed, 22 Aug 2007 15:00:40 GMT

Mabrouk, correctiong from my previous post.. you don't need to define gateway. Try this .

monitor>interface 1

monitor>addres 10.0.0.154

monitor>server 10.0.0.155

Re: Pix 515E FO Rebooting problem

rigoberto.cintron — Wed, 22 Aug 2007 15:46:30 GMT

As long as the TFTP server is in the same IP subnet you don't need a gateway.