Not able to copy TFTP to Cisco PIX Flash

[ciscoavinash]

Hi ,

I have a cisco PIX 5525 Firewall with 6.3 (5) IOS and 3.0 Device Manager. Now i have to upgrade the IOS to 7.2.

Tried through TFTP but getting error saying tftp:couldn't open. Tftp ip is pinging from PIX.

Let me know if we can use TFTP with this ios verison and Device manger.

Share me the procedure for upgrading. Very very urgent.

FW copy tftp flash
Address or name of remote host 0.0.0.0 157.227.100.10
Source file name cdisk pix723.bin
copying tftp: 157.227.100.10 pix723.bin to flash:image
yesnoagain yes
tftp: out of states
Open tftp 1 157.227.100.10 pix723.bin failed
fw ping 157.227.100.10
157.227.100.10 response received -- 0ms
157.227.100.10 response received -- 0ms
157.227.100.10 response received -- 0ms

FW IP 157.227.100.100 255.255.255.0

Share me the procedure for upgrading. Very very urgent.

[Philip D'Ath]

I can't remember that far back.  Does that version support http?  If so, use that it copy it to the PIC.

[Richard Burts]

The post refers to the device as a PIX but gives the model number as 5525 which sounds much more like ASA than PIX. And in either case the current running version of 6.3(5) is really ancient. And the version upgrading to of 7.2 is very old. And as I think about it the 5525 would not run on code this old. So I am quite confused about what is going on with this question.

HTH

Rick

[Marvin Rhoads]

rburts  I believe the OP means to say Pix 525. (ASA 5525-X hardware support began only with ASA software 8.6.)

ciscoavinash  The official procedure is documented here: http://www.cisco.com/c/en/us/support/docs/security/pix-500-series-security-appliances/4801-upgrade.html#usingcommdupgrade

However if yours is failing at that procedure, you may need to recover it using the erasedisk.bin image or such. Since that Pix device has not been sold for many years now, there is no option of getting such image for Cisco anymore.

If you can get Pix Device Manager to work (requires a VERY old Java) you may be able to transfer the file using that (over https).

All in all you would be better off purchasing a used ASA so that you can have a firewall that is only 5 years old instead of one that is 10+ years old. Even a little ASA 5505 can out perform an old Pix 525.