cisco PIX-515e reset to factory defaults

[CCB]

Hi,

I have a cisco PIX-515e which i have connected to a emulator through the console port, and im having trouble erasing data from it.

I can get into 'pixfirewall' mode and 'monitor' mode but thats as far as i get. i have tried 'write erase' and 'configure factory-default' in both modes to no success.

Any help would be much appreciated.

thanks,

[Kureli Sankar]

PIX# conf t

PIX(config)# write erase

Erase configuration in flash memory? [confirm]

[OK]

PIX(config)# reload

System config has been modified. Save? [Y]es/[N]o: 

-KS

[CCB]

hi thanks how do i get to the PIX# i have not managed to locate this yet ?

[Kureli Sankar]

It is the same as the pixfirewall mode you said you are able to get to.

If you are on rommon mode I believe you can issue "reset" and it will just load the code in the flash and get you to a "#" prompt. From there you can issue "config t" and proceed.

-KS

[CCB]

Hi Poonguzhali,

You cannot get rommon mode on a PIX 515e console, and the 'conf t' command is not recognized at my 'PIXFIREWALL' prompt.

Im just going round in circles, any suggesstions on this model??

thanks,

[Stacy.Kinter]

this is a little late over a year, you probably alreay figured it out. in monitor mode.

set your interface

monitor> int 0          (this doesnt matter much as long as the interface is valid)

next set the ip address of our pix

monitor> add 192.168.1.50     (this just sets the pix int 0 to this ip address)

now set the tftp server

monitor> server 192.168.1.79     (this is the ip address of my pc with a tftp server)

set the gateway

monitor> gateway 0.0.0.0      (i had much trouble with this but until i set the gateway to this it didnt work)

now back to your pc assuming you have a tftp server installed.

download the necessary recover tool at (subject to change probably) make sure you put it in your default directory of your tftp server.

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_password_recovery09186a008009478b.shtml

this is key probably

if you have the wrong tool the image will download successfully to your pix but it will not do anything just stop

after the file has been received.

so if your unsure try all the images.

now back to the pix

to initiate a file download you have to declare it so

monitor> file np62.bin

and then to start the download

monitor> tftp

see below.... (entire session via console cable)

************************************************************

monitor> int 0
0: i8255X @ PCI(bus:0 dev:14 irq:10)
1: i8255X @ PCI(bus:0 dev:13 irq:11)

Using 0: i82557 @ PCI(bus:0 dev:14 irq:10), MAC:
monitor> add 192.168.1.50
address 192.168.1.50
monitor> server 192.168.1.79
server 192.168.1.79
monitor> gateway 0.0.0.0
gateway 0.0.0.0
monitor> file np62.bin
file np62.bin
monitor> tftp
tftp np62.bin@192.168.1.79......................................................
................................................................................
...........
Received 73728 bytes

Cisco Secure PIX Firewall password tool (3.0) #0: Wed Mar 27 11:02:16 PST 2002
System Flash=E28F128J3 @ 0xfff00000
BIOS Flash=am29f400b @ 0xd8000

Do you wish to erase the passwords? [yn]

******************************************************

if that doesnt work im not sure just try the other images.