PIX 515 OS Upgrade from 4.4(1) Fails Checksum

[mbrustman]

I am trying to upgrade my PIX515 to 6.3(3). After following the procedure to tftp in monitor mode with different machines and different tftp servers. I see the image transfer then a message is seen on the console stating that the checksum verification on install image failed and the box reboots back into the older version. Is there something I am missing here? some interim upgrade path? When running show ver ...I cannot determine the actual flash size if this was the cause of the problem?

Any advice is helpful

[mikegallagher]

The 515 has 16M of flash by default, so you're ok there. I have only seen this error when the image didn't complete the TFTP. I had to use the Cisco TFTP server and everything worked fine.

Also, make sure you check the integrity of the image you downloaded via the MD5 checksum. If they match, you know you have a good image.

HTH,

Mikr

[mbrustman]

How do you check the MD5 checksum prior to transferring via tftp? Is there a tool to use that performs this check?

[vitaliy.pindyura]

Yes, there are some tools available on the Internet

http://www.handhelds.org/z/wiki/md5sum

The MD5 sum for pix633.bin is bbb8d71e956ac689c39e59bc8fe11766

[mikegallagher]

I really like SecEx MD5+ Digest 1.1. Go to www.download.com and search on "MD5". It should show up as the third one down. It has a nice "right-click" feature. So all you have to do is right-click on the file and you can quickly generate the signature.

HTH,

Mike

[mbrustman]

Thankyou for the MD5 program information. I did verify that the checksum was correct. I have used TFTP Server from 3COM, Solarwinds, WinAgents and they all say that the transfer completed. See below capture.

tftp

pix633.bin@10.0.0.1..........................................

..............................................................................................................

...............................................................................................

Received 2064384 bytes

Cisco Secure PIX Firewall admin loader (3.0) #0: Wed Aug 13 13:38:20 PDT 2003

Flash=i28F640J5 @ 0x300

BIOS Flash=AT29C257 @ 0xd8000

imgsum_config: sumval(0x6caa) md5(0x00a3de6a 0x031605ed 0x0841ffda 0xb04fd68a)

imgsum_verify: chksum(0x0 ) md5(0x1449ebd2 0x06b675ba 0x7dcf0398 0x83ba1267)

Checksum verification on install image failed.

Rebooting....PIX BIOS (4.0) #38: Tue Apr 27 12:45:23 PDT 1999

timhahn@irp-view5:/vws/dry/timhahn/trunk/loader

Platform PIX-515

Flash=i28F640J5 @ 0x300

Use BREAK or ESC to interrupt flash boot.Flash boot in 5 seconds.4 seconds.3

seconds.2 seconds.1 seconds.

Reading

561664 bytes of image from flash.32MB RAM

Flash=i28F640J5 @ 0x300

mcwa i82559 Ethernet at irq 10 MAC: 0050.54fe.f706

mcwa i82559 Ethernet at irq 7 MAC: 0050.54fe.f707

-----------------------------------------------------------------------

|| ||

|| ||

|||| ||||

..:||||||:..:||||||:..

c i s c o S y s t e m s

Private Internet eXchange

-----------------------------------------------------------------------

PIX Firewall

PIX Version 4.4(1)

Failover: Disabled

IPSec: Disabled

Port number: 2

Maximum Interfaces : 2

[mikegallagher]

That's wierd. You may want to try going to 6.1.5 first, then 6.3.3. It's worth a shot. Just make sure you have your config backed up.

Mike

[mbrustman]

I tried 529, 623, 631 have not seen 6.1.5 yet

[mikegallagher]

Well, it's actually irrelivant. If you tried a lower version and it didn't work then that's all I was suggesting to try. If you have maintenance on that PIX I would suggest you open a case with TAC, you may have a hardware problem.

HTH,

Mike