Pix 515E FO Rebooting problem

m.belateche · ‎08-19-2007

Hi

The Pix 516E with a FO license, fails to load the pix image from the flash. I can enter the monitor mode, configure the settings to download a new image from from a Tftp server, but nothing happens cannot even ping the tftp server. See attached debug output.

JORGE RODRIGUEZ · ‎08-19-2007

hi, looking at your debug text this is what is wrong.

You have

monitor>interface 1 -------> pix inside interface#

monitor>address 10.0.0.155 ---> this should be address of PIX interface1

monitor>server 10.0.0.155 ---> tftp server address

this is why you cannot ping .

enter as follows:

monitor>interface 1

monitor>address x.x.x.x ----> address of PIX inside interface

monitor>server x.x.x.x ----> address of tftp server

then try ping the tftp server, if successful proceed with upgrade.

ensure new code is in root of tftp server.

question:

are you currently running 6.x code? I see you are trying upgrading to 7.x

ensure you meet all HW requirements for 7.x on your pix. Refer to this

page for information:

http://www.cisco.com/cgi-bin/tablebuild.pl/pix

memory upgrade for 515 specifications before going to 7.x code.

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/prod_bulletin0900aecd8023c8d4.html

HTH

Jorge

Jorge Rodriguez

purohit_810 · ‎08-20-2007

You should again put old IOS and boot the pix once.

Once pix will boot by old IOS, upgrade it after new IOS.

Follow URL: http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a00804708d8.shtml

There are also another URL:

How can you upgrade PIX appliance by Monitor MODE:

URL: http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a00804708d8.shtml#t3

Regards,

Dharmesh Purohit

rigoberto.cintron · ‎08-21-2007

Just make sure you use a different IP address in the PIX interface. Right now you are putting the same IP address for the PIX interface and the TFTP server. Those addresses should be different.

m.belateche · ‎08-22-2007

Hi

Have put the correct addresses enabled icmp debug. initiated a ping but with no result. The pix FO does not even attempt to ping the remote server. Could this be a hardware problem?

monitor> address 10.0.0.154

address 10.0.0.154

monitor> gateway 10.0.0.155

gateway 10.0.0.155

monitor> server 10.0.0.155

server 10.0.0.155

monitor> trace 10.0.0.155

trace on

monitor> ping 10.0.0.155

Sending 5, 100-byte 0x8468 ICMP Echoes to 10.0.0.155, timeout is 4 seconds:

JORGE RODRIGUEZ · ‎08-22-2007

did you do interface 1 as this is your inside interface

e.g

monitor>interface 1

after you define interface do the rest of the script and try again.

[EDIT]

is your tftp server also a gateway?

again, as long your tftp server is in the inside 10.0.0.0 subnet your script you be

monitor>interface 1

monitor>addres 10.0.0.154

monitor>gateway 10.0.0.154

monitor>server 10.0.0.155

Jorge Rodriguez

JORGE RODRIGUEZ · ‎08-22-2007

Mabrouk, correctiong from my previous post.. you don't need to define gateway. Try this .

monitor>interface 1

monitor>addres 10.0.0.154

monitor>server 10.0.0.155

Jorge Rodriguez

rigoberto.cintron · ‎08-22-2007

As long as the TFTP server is in the same IP subnet you don't need a gateway.