pix 501 restore factory defaults

[joel-metz]

I have a Pix 501 with CLI version 6.1. I have tried the config factory-default command and it absolutely does not work, its not even an option when I use the ?. Any suggestions, or other ways to restore the factory config?

Thank You,

Joel

[Patrick Iseli]

Do a "write erase" et then "reload" dont save.

sincerely

Patrick

[joel-metz]

I should get the soho environment config back when at factory defaults. Insted it brings me to the setup prompt and I get the empty config. Factory defaults included a default soho configuration ideal for my cable modem setup I have at my office. Any Suggestions would be most helpful?

Thanks Patrick!

Sincerely,

Joel

[Patrick Iseli · Accepted solution]

Here is an example of the facrory reset config.

1.)Connect to console, blue cable, 9600/N/1

2.)Enable

3.)conf t

4.)Drag and Drop the config bellow:

interface ethernet0 auto shutdown

interface ethernet1 auto

nameif ethernet0 outside security0

nameif ethernet1 inside security100

hostname pixfirewall

fixup protocol dns maximum-length 512

fixup protocol ftp 21

fixup protocol h323 h225 1720

fixup protocol h323 ras 1718-1719

fixup protocol http 80

fixup protocol rsh 514

fixup protocol rtsp 554

fixup protocol sip 5060

fixup protocol sip udp 5060

fixup protocol skinny 2000

fixup protocol smtp 25

fixup protocol sqlnet 1521

fixup protocol tftp 69

names

pager lines 24

mtu outside 1500

mtu inside 1500

mtu intf2 1500

no ip address outside

ip address inside 192.168.1.1 255.255.255.0

ip audit info action alarm

ip audit attack action alarm

pdm logging informational 100

pdm history enable

arp timeout 14400

timeout xlate 3:00:00

timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h225 1:00:00

timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:00

timeout uauth 0:05:00 absolute

aaa-server TACACS+ protocol tacacs+

aaa-server TACACS+ max-failed-attempts 3

aaa-server TACACS+ deadtime 10

aaa-server RADIUS protocol radius

aaa-server RADIUS max-failed-attempts 3

aaa-server RADIUS deadtime 10

aaa-server LOCAL protocol local

http server enable

http 192.168.1.0 255.255.255.0 inside

no snmp-server location

no snmp-server contact

snmp-server community public

no snmp-server enable traps

floodguard enable

telnet timeout 5

ssh timeout 5

console timeout 0

dhcpd address 192.168.1.2-192.168.1.254 inside

dhcpd lease 3600

dhcpd ping_timeout 750

dhcpd auto_config outside

dhcpd enable inside

terminal width 80

sincerely

Patrick

[joel-metz]

Thank Patrick :)

That worked.

Sincerely,

Joel

[fedrodri]

Joel,

Just FYI, on PIX-501, PIX-506 and PIX-506E, you can also restore Factory Setings by entering the command, from the configuration mode:

configure factory-default

Thanks,

Federico Rodriguez

[Arcadian]

what if you cannot access the privledge mode

user was fired who knew the password.

[Elard_badillo]

Password Recovery Procedure:

https://www.falconitservices.com/support/KB/Lists/Posts/Post.aspx?ID=138

Password Reset Bin:

http://skeena.net/kb/cisco%20pix%20firewall%20password%20reset/

[bilalbinsaeed]

Password Reset Bin:

http://skeena.net/kb/cisco%20pix%20firewall%20password%20reset/

^ Works as of 21/05/2019