Pix 515E FO Rebooting problem

Unanswered Question
Aug 19th, 2007
User Badges:

Hi

The Pix 516E with a FO license, fails to load the pix image from the flash. I can enter the monitor mode, configure the settings to download a new image from from a Tftp server, but nothing happens cannot even ping the tftp server. See attached debug output.



  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
JORGE RODRIGUEZ Sun, 08/19/2007 - 14:47
User Badges:
  • Green, 3000 points or more

hi, looking at your debug text this is what is wrong.


You have

monitor>interface 1 -------> pix inside interface#

monitor>address 10.0.0.155 ---> this should be address of PIX interface1

monitor>server 10.0.0.155 ---> tftp server address


this is why you cannot ping .


enter as follows:


monitor>interface 1

monitor>address x.x.x.x ----> address of PIX inside interface

monitor>server x.x.x.x ----> address of tftp server


then try ping the tftp server, if successful proceed with upgrade.

ensure new code is in root of tftp server.



question:

are you currently running 6.x code? I see you are trying upgrading to 7.x

ensure you meet all HW requirements for 7.x on your pix. Refer to this

page for information:

http://www.cisco.com/cgi-bin/tablebuild.pl/pix


memory upgrade for 515 specifications before going to 7.x code.

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/prod_bulletin0900aecd8023c8d4.html



HTH

Jorge




purohit_810 Mon, 08/20/2007 - 04:42
User Badges:
  • Silver, 250 points or more

You should again put old IOS and boot the pix once.


Once pix will boot by old IOS, upgrade it after new IOS.


Follow URL: http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a00804708d8.shtml


There are also another URL:


How can you upgrade PIX appliance by Monitor MODE:

URL: http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a00804708d8.shtml#t3


Regards,

Dharmesh Purohit



rigoberto.cintr... Tue, 08/21/2007 - 09:41
User Badges:

Just make sure you use a different IP address in the PIX interface. Right now you are putting the same IP address for the PIX interface and the TFTP server. Those addresses should be different.

m.belateche Wed, 08/22/2007 - 06:04
User Badges:

Hi


Have put the correct addresses enabled icmp debug. initiated a ping but with no result. The pix FO does not even attempt to ping the remote server. Could this be a hardware problem?


monitor> address 10.0.0.154

address 10.0.0.154

monitor> gateway 10.0.0.155

gateway 10.0.0.155

monitor> server 10.0.0.155

server 10.0.0.155

monitor> trace 10.0.0.155

trace on

monitor> ping 10.0.0.155

Sending 5, 100-byte 0x8468 ICMP Echoes to 10.0.0.155, timeout is 4 seconds:

JORGE RODRIGUEZ Wed, 08/22/2007 - 07:16
User Badges:
  • Green, 3000 points or more

did you do interface 1 as this is your inside interface


e.g

monitor>interface 1


after you define interface do the rest of the script and try again.


[EDIT]


is your tftp server also a gateway?

again, as long your tftp server is in the inside 10.0.0.0 subnet your script you be


monitor>interface 1

monitor>addres 10.0.0.154

monitor>gateway 10.0.0.154

monitor>server 10.0.0.155




JORGE RODRIGUEZ Wed, 08/22/2007 - 08:00
User Badges:
  • Green, 3000 points or more

Mabrouk, correctiong from my previous post.. you don't need to define gateway. Try this .


monitor>interface 1

monitor>addres 10.0.0.154

monitor>server 10.0.0.155


Actions

This Discussion