PIX 520 maximum config size

[scoe]

PIX 520 that is configured using CSPM seems to have reached it's maximum config size. When trying to make a config change through CSPM it says there is not enough space for request.

When checking on the flash through the CLI....

pp1# show flashfs

flash file system: version:2 magic:0x12345679

file 0: origin: 0 length:1540152

file 1: origin: 1572864 length:1812007

file 2: origin: 0 length:0

file 3: origin: 3407872 length:4748324

file 4: origin: 8257536 length:280

pp1#

I beleive file 1 is the config and is 1812007 - more than what the max config size is supposed to be on pix 520 - According to the documentation the PIX 520 has max config size of 1Mbyte and PIX 525 has max config size of 2Mbyte.

1) Am I reading this correctly that my config is about 1.8Mbytes?

2) How can my config be bigger than 1Mbyte - the max for a PIX520?

3) Is it possible to re-organise the PIX flash to give more space for config?

4) If we change the PIX for a 525 will we double the space config

Answers to any of these questions would be much appreciated!

[nkhawaja]

PIX Ver 6.2 and lower (ver 2 filesystem)

file 0: PIX binary image

file 1: startup config

file 2: IPSec key and certificate information

file 3: PDM image

file 4: filesystem record

PIX Ver 6.3 and higher (ver 3 filesystem)

file 0: PIX binary image

file 1: startup config

file 2: IPSec key and certificate information.

file 3: PDM image

file 4: Crashinfo (last saved traceback and show tech output)

file 5: filesystem record.

pdm-pix(config)# show flashfs

flash file system: version:3 magic:0x12345679

file 0: origin: 0 length:1941560 -PIX Binary Image

file 1: origin: 2621440 length:4909 -PIX Config

file 2: origin: 2752512 length:1917 -IPSec data

file 3: origin: 2883584 length:3126944 -PDM Binary Image

file 4: origin: 6029312 length:131072 -Crashinfo file

file 5: origin: 8257536 length:308 -Filesystem record

I think the length is in bytes. so your config reaching 1.8MB. I am not sure about the config size limit on 520 and 525. BUt i know that 2MB is limit (not sure if that is for 520 as well or not)

not sure how to reorganize, i dont think it is possible either. try to clean up the configs. CSPM uses revisions of ACLs. So try to login to pix and remove the revision ACL

Thanks

Nadeem

[scoe]

Thanks Nadeem, but you haven't answered any of my questions.

Anyone else know?

[nkhawaja]

1) Am I reading this correctly that my config is about 1.8Mbytes?

YES

2) How can my config be bigger than 1Mbyte - the max for a PIX520?

Not sure on this one, searched all over, but as far as I knew it was 2MB limit

3) Is it possible to re-organise the PIX flash to give more space for config?

No, you have to clear the whole flashfs ( i mean erase it and start from scratch)

4) If we change the PIX for a 525 will we double the space config

No, the limit is 2MB

Thanks

Nadeem

[jfawcett]

Thanks Nadeem I am replying on behalf of Stuart.

On point No 3 is it possible if we erase the flash and if so how do we reorganise the flash file system.