cisco PIX-515e reset to factory defaults *Expert Advice Only Please*

CCB · ‎07-05-2011

Hi,

I have a cisco PIX-515e which i have connected to a emulator through the console port, and im having trouble erasing data from it.

I can get into 'pixfirewall' mode and 'monitor' mode but thats as far as i get. i have tried 'write erase' and 'configure factory-default' in both modes to no success.

When i last posted this i had alot of replies mentioning ROMMON mode but i want to stress the PIX 515e does not have ROMMON mode it has MONITOR mode however the commands are not the same as ROMMON commands.

Any help would be much appreciated.

thanks,

Jennifer Halim · ‎07-05-2011

Please go to the pixfirewall mode, then type: enable

If it asked for password, type in the enable password for that PIX. If it doesn't have a password, just try to hit enter.

Then from the enable mode, you can go to config mode, and "write erase" to erase the configuration.

BTW, what version is the PIX running, and can you please grab a copy of the running config?

CCB · ‎07-05-2011

8 MB RAM

PCI Device Table.
Bus Dev Func VendID DevID Class              Irq
00 00 00   8086   7192 Host Bridge
00 07 00   8086   7110 ISA Bridge
00 07 01   8086   7111 IDE Controller
00 07 02   8086   7112 Serial Bus         9
00 07 03   8086   7113 PCI Bridge
00 0D 00   8086   1209 Ethernet           11
00 0E 00   8086   1209 Ethernet           10
00 11 00   14E4   5823 Co-Processor       11
00 13 00   8086   B154 PCI-to-PCI Bridge
01 04 00   8086   1229 Ethernet           11
01 05 00   8086   1229 Ethernet           10
01 06 00   8086   1229 Ethernet           9
01 07 00   8086   1229 Ethernet           5

Cisco Secure PIX Firewall BIOS (4.2) #0: Mon Dec 31 08:34:35 PST 2001
Platform PIX-515E
System Flash=E28F128J3 @ 0xfff00000

Use BREAK or ESC to interrupt flash boot.
Use SPACE to begin flash boot immediately.
Reading 123392 bytes of image from flash.

PIX Flash Load Helper

Initializing flashfs...
flashfs[0]: 8 files, 3 directories
flashfs[0]: 0 orphaned files, 0 orphaned directories
flashfs[0]: Total bytes: 16128000
flashfs[0]: Bytes used: 13963264
flashfs[0]: Bytes available: 2164736
flashfs[0]: Initialization complete.

Booting first image in flash

Launching image flash:/pix722.bin
##############################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################
128MB RAM

Total NICs found: 6
mcwa i82559 Ethernet at irq 10 MAC: 0016.9da2.5907
mcwa i82559 Ethernet at irq 11 MAC: 0016.9da2.5908
mcwa i82559 Ethernet at irq 11 MAC: 000d.8810.d91c
mcwa i82559 Ethernet at irq 10 MAC: 000d.8810.d91d
mcwa i82559 Ethernet at irq 9 MAC: 000d.8810.d91e
BIOS Flash=am29f400b @ 0xd8000 MAC: 000d.8810.d91f

Initializing flashfs...
flashfs[7]: 8 files, 3 directories
flashfs[7]: 0 orphaned files, 0 orphaned directories
flashfs[7]: Total bytes: 16128000
flashfs[7]: Bytes used: 13963264
flashfs[7]: Bytes available: 2164736
flashfs[7]: flashfs fsck took 15 seconds.
flashfs[7]: Initialization complete.

Licensed features for this platform:
Maximum Physical Interfaces : 6
Maximum VLANs               : 25
Inside Hosts                : Unlimited
Failover                    : Active/Active
VPN-DES                     : Enabled
VPN-3DES-AES                : Enabled
Cut-through Proxy           : Enabled
Guards                      : Enabled
URL Filtering               : Enabled
Security Contexts           : 2
GTP/GPRS                    : Disabled
VPN Peers                   : Unlimited

This platform has an Unrestricted (UR) license.

Encryption hardware device : VAC+ (Crypto5823 revision 0x1)
--------------------------------------------------------------------------
                                 .            .
                                 |            |
                                |||          |||
                              .|| ||.      .|| ||.
                           .:||| | |||:..:||| | |||:.
                            C i s c o S y s t e m s
--------------------------------------------------------------------------

Cisco PIX Security Appliance Software Version 7.2(2)

****************************** Warning *******************************
This product contains cryptographic features and is
subject to United States and local country laws
governing, import, export, transfer, and use.
Delivery of Cisco cryptographic products does not
imply third-party authority to import, export,
distribute, or use encryption. Importers, exporters,
distributors and users are responsible for compliance
with U.S. and local country laws. By using this
product you agree to comply with applicable laws and
regulations. If you are unable to comply with U.S.
and local laws, return the enclosed items immediately.

A summary of U.S. laws governing Cisco cryptographic
products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by
sending email to export@cisco.com.
******************************* Warning *******************************

Restricted Rights Legend

Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.

                Cisco Systems, Inc.
                170 West Tasman Drive
                San Jose, California 95134-1706

Cryptochecksum (unchanged): 43dccc97 2fb4bfec 15a33bef dad78b7e
Type help or '?' for a list of available commands.
pixfirewall>

I am unable to get onto enable mode because i do not no the password? any idea of a way round, i need to get into that enable mode.

Leo Laohoo · ‎07-05-2011

If it asks for a password, have you tried just hitting the "Enter" key?

CCB · ‎07-05-2011

Yeah to no joy i just try and try and all i get is access denied.

Jennifer Halim · ‎07-05-2011

If hitting just "Enter" key as suggested by leolaohoo doesn't work, then also try "pix" as the password. If none works, then you would need to perform password recovery.

Here is the procedure to perform password recovery:

http://www.cisco.com/en/US/docs/security/asa/asa70/configuration/guide/trouble.html#wp1049417

Once you have perform the password recovery, then you can just hit "Enter" on enable mode.

CCB · ‎07-05-2011

ok ill give this a try and get back to you thanks.

alykamalgamil · ‎01-26-2014

sir i have a simlar problem but i only can get into monitor mode and i can not get into anything else can you help me????