01-28-2004 01:43 PM - edited 02-20-2020 11:13 PM
I am trying to upgrade my PIX515 to 6.3(3). After following the procedure to tftp in monitor mode with different machines and different tftp servers. I see the image transfer then a message is seen on the console stating that the checksum verification on install image failed and the box reboots back into the older version. Is there something I am missing here? some interim upgrade path? When running show ver ...I cannot determine the actual flash size if this was the cause of the problem?
Any advice is helpful
01-28-2004 02:26 PM
The 515 has 16M of flash by default, so you're ok there. I have only seen this error when the image didn't complete the TFTP. I had to use the Cisco TFTP server and everything worked fine.
Also, make sure you check the integrity of the image you downloaded via the MD5 checksum. If they match, you know you have a good image.
HTH,
Mikr
01-28-2004 03:03 PM
How do you check the MD5 checksum prior to transferring via tftp? Is there a tool to use that performs this check?
01-28-2004 03:08 PM
Yes, there are some tools available on the Internet
http://www.handhelds.org/z/wiki/md5sum
The MD5 sum for pix633.bin is bbb8d71e956ac689c39e59bc8fe11766
01-29-2004 06:35 AM
I really like SecEx MD5+ Digest 1.1. Go to www.download.com and search on "MD5". It should show up as the third one down. It has a nice "right-click" feature. So all you have to do is right-click on the file and you can quickly generate the signature.
HTH,
Mike
01-29-2004 08:03 AM
Thankyou for the MD5 program information. I did verify that the checksum was correct. I have used TFTP Server from 3COM, Solarwinds, WinAgents and they all say that the transfer completed. See below capture.
tftp
pix633.bin@10.0.0.1..........................................
..............................................................................................................
...............................................................................................
Received 2064384 bytes
Cisco Secure PIX Firewall admin loader (3.0) #0: Wed Aug 13 13:38:20 PDT 2003
Flash=i28F640J5 @ 0x300
BIOS Flash=AT29C257 @ 0xd8000
imgsum_config: sumval(0x6caa) md5(0x00a3de6a 0x031605ed 0x0841ffda 0xb04fd68a)
imgsum_verify: chksum(0x0 ) md5(0x1449ebd2 0x06b675ba 0x7dcf0398 0x83ba1267)
Checksum verification on install image failed.
Rebooting....PIX BIOS (4.0) #38: Tue Apr 27 12:45:23 PDT 1999
timhahn@irp-view5:/vws/dry/timhahn/trunk/loader
Platform PIX-515
Flash=i28F640J5 @ 0x300
Use BREAK or ESC to interrupt flash boot.Flash boot in 5 seconds.4 seconds.3
seconds.2 seconds.1 seconds.
Reading
561664 bytes of image from flash.32MB RAM
Flash=i28F640J5 @ 0x300
mcwa i82559 Ethernet at irq 10 MAC: 0050.54fe.f706
mcwa i82559 Ethernet at irq 7 MAC: 0050.54fe.f707
-----------------------------------------------------------------------
|| ||
|| ||
|||| ||||
..:||||||:..:||||||:..
c i s c o S y s t e m s
Private Internet eXchange
-----------------------------------------------------------------------
PIX Firewall
PIX Version 4.4(1)
Failover: Disabled
IPSec: Disabled
Port number: 2
Maximum Interfaces : 2
01-29-2004 10:18 AM
That's wierd. You may want to try going to 6.1.5 first, then 6.3.3. It's worth a shot. Just make sure you have your config backed up.
Mike
01-29-2004 01:33 PM
I tried 529, 623, 631 have not seen 6.1.5 yet
01-30-2004 06:50 AM
Well, it's actually irrelivant. If you tried a lower version and it didn't work then that's all I was suggesting to try. If you have maintenance on that PIX I would suggest you open a case with TAC, you may have a hardware problem.
HTH,
Mike
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide