分享专业级别（cisco PIX OS)安装指南

cloudq · 发表于 2004-7-12 15:21:35

马上注册，结交更多好友，享用更多功能，让你轻松玩转社区。

您需要登录才可以下载或查看，没有账号？注册

×

PIX启动是考FLOOPY把IMAGE读到RAM里去的 Rebooting.... 如果把里面的82559网卡拿出那么他会检测不到硬件而不段REBOOT Cisco Secure PIX Firewall BIOS (3.6) Booting Floppy .................................. PIX floppy loader (3.0) #0: Mon Oct 2 07:02:43 PDT 2000 Reading installation media............. PIX floppy loader (3.0) #0: Mon Oct 2 07:02:43 PDT 2000 Reading installation media..................................... PIX admin loader (3.0) #0: Mon Oct 2 07:02:44 PDT 2000 Flash=i28F640J5 Flash version 4.4.7, Install version 4.4.7 Do you want me to install new version onto flash? [n] No loading from flash... 128MB RAM Flash=i28F640J5 @ 0x300 mcwa i82559 Ethernet at irq 11 MAC: 0002.b308.a0c6 mcwa i82559 Ethernet at irq 10 MAC: 0002.b326.1a09 pixfirewall# show int eth0 interface ethernet0 "outside" is up, line protocol is down Hardware is “”“i82559”“”“ ethernet, address is 0002.b308.a0c6 IP address 127.0.0.1, subnet mask 255.255.255.255 MTU 1500 bytes, BW 10000 Kbit half duplex 0 packets input, 0 bytes, 0 no buffer Received 0 broadcasts, 0 runts, 0 giants 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort 0 packets output, 0 bytes, 0 underruns 0 unicast rpf drops 0 output errors, 0 collisions, 0 interface resets 0 babbles, 0 late collisions, 0 deferred 0 lost carrier, 0 no carrier pixfirewall# ISA上的那快东西确定是FLASH无疑了现在只要按照以下方法就可以把X86变成标标准准的一台PIX520了下载rawrite.exe,pix529.bin,bh529.bin C:\>rawrite RaWrite 1.2 - Write disk file to raw floppy diskette Enter source file name: bh59.bin Enter destination drive: a: Please insert a formatted diskette into drive A: and press -ENTER- : Number of sectors per track for this disk is 18. Writing image to drive A:. Press ^C to abort. Track: 11 Head: 1 Sector: 16 Done. C:\>0 然后就可以利用floopy进入monitor模式下 monitor> interface 1 0: i8255X @ PCI(bus:0 dev:14 irq:10) 1: i8255X @ PCI(bus:0 dev:13 irq:11) Using 1: i82557 @ PCI(bus:0 dev:13 irq:11), MAC: 0002.b945.a23c monitor> address 172.18.124.154 address 172.18.124.154 monitor> server 172.18.125.3 server 172.18.125.3 monitor> file pix611.bin file pix611.bin monitor> ping 172.18.125.3 Sending 5, 100-byte 0xcde2 ICMP Echoes to 172.18.125.3, timeout is 4 seconds: !!!!! Success rate is 100 percent (5/5) monitor> tftp tftp pix611.bin@172.18.125.3.......................................... Received 2562048 bytes Cisco Secure PIX Firewall admin loader (3.0) #0: Tue Dec 517:35:46 PST 2000 System Flash=E28F128J3 @ 0xfff00000 BIOS Flash=am29f400b @ 0xd8000 Flash version 6.1.1, Install version 6.1.1 Do you wish to copy the install image into flash? [n] y Installing to flash Serial Number: 480380761 (0x1ca20759) Activation Key: 760754d0 39f62229 a4a0245f b5b87e80 Do you want to enter a new activation key? [n] n Writing 2469944 bytes image into flash... 然后A：启动 ................. Firewall>enable Firewall# Firewall# 注意几点 1）安装的时候和OLIVE没区别，显示器上没进度条 2）安装的时候要有ISA或PCI接口的FLASH卡，最好是INTEL的 3）安装的时候PCI上要有2块82550系列的网卡 Good luck关键是那个flash卡究竟长的什么样子？？PCI CF卡不知是否可以

zhanghui · 发表于 2004-7-18 19:03:48

没有bh59.bin 阿

zhanghui · 发表于 2004-7-18 19:04:57

look,cfII-pci,但可能是只读的

samhui · 发表于 2004-7-18 23:39:12

QUOTE (cloudq @ Jul 12 2004, 03:21 PM)
PIX启动是考FLOOPY把IMAGE读到RAM里去的 Rebooting.... 如果把里面的82559网卡拿出那么他会检测不到硬件而不段REBOOT Cisco Secure PIX Firewall BIOS (3.6) Booting Floppy .................................. PIX floppy loader (3.0) #0: Mon Oct 2 07:02:43 PDT 2000 Reading installation media............. PIX floppy loader (3.0) #0: Mon Oct 2 07:02:43 PDT 2000 Reading installation media..................................... PIX admin loader (3.0) #0: Mon Oct 2 07:02:44 PDT 2000 Flash=i28F640J5 Flash version 4.4.7, Install version 4.4.7 Do you want me to install new version onto flash? [n] No loading from flash... 128MB RAM Flash=i28F640J5 @ 0x300 mcwa i82559 Ethernet at irq 11 MAC: 0002.b308.a0c6 mcwa i82559 Ethernet at irq 10 MAC: 0002.b326.1a09 pixfirewall# show int eth0 interface ethernet0 "outside" is up, line protocol is down Hardware is “”“i82559”“”“ ethernet, address is 0002.b308.a0c6 IP address 127.0.0.1, subnet mask 255.255.255.255 MTU 1500 bytes, BW 10000 Kbit half duplex 0 packets input, 0 bytes, 0 no buffer Received 0 broadcasts, 0 runts, 0 giants 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort 0 packets output, 0 bytes, 0 underruns 0 unicast rpf drops 0 output errors, 0 collisions, 0 interface resets 0 babbles, 0 late collisions, 0 deferred 0 lost carrier, 0 no carrier pixfirewall# ISA上的那快东西确定是FLASH无疑了现在只要按照以下方法就可以把X86变成标标准准的一台PIX520了下载rawrite.exe,pix529.bin,bh529.bin C:\>rawrite RaWrite 1.2 - Write disk file to raw floppy diskette Enter source file name: bh59.bin Enter destination drive: a: Please insert a formatted diskette into drive A: and press -ENTER- : Number of sectors per track for this disk is 18. Writing image to drive A:. Press ^C to abort. Track: 11 Head: 1 Sector: 16 Done. C:\>0 然后就可以利用floopy进入monitor模式下 monitor> interface 1 0: i8255X @ PCI(bus:0 dev:14 irq:10) 1: i8255X @ PCI(bus:0 dev:13 irq:11) Using 1: i82557 @ PCI(bus:0 dev:13 irq:11), MAC: 0002.b945.a23c monitor> address 172.18.124.154 address 172.18.124.154 monitor> server 172.18.125.3 server 172.18.125.3 monitor> file pix611.bin file pix611.bin monitor> ping 172.18.125.3 Sending 5, 100-byte 0xcde2 ICMP Echoes to 172.18.125.3, timeout is 4 seconds: !!!!! Success rate is 100 percent (5/5) monitor> tftp tftp pix611.bin@172.18.125.3.......................................... Received 2562048 bytes Cisco Secure PIX Firewall admin loader (3.0) #0: Tue Dec 517:35:46 PST 2000 System Flash=E28F128J3 @ 0xfff00000 BIOS Flash=am29f400b @ 0xd8000 Flash version 6.1.1, Install version 6.1.1 Do you wish to copy the install image into flash? [n] y Installing to flash Serial Number: 480380761 (0x1ca20759) Activation Key: 760754d0 39f62229 a4a0245f b5b87e80 Do you want to enter a new activation key? [n] n Writing 2469944 bytes image into flash... 然后A：启动 ................. Firewall>enable Firewall# Firewall# 注意几点 1）安装的时候和OLIVE没区别，显示器上没进度条 2）安装的时候要有ISA或PCI接口的FLASH卡，最好是INTEL的 3）安装的时候PCI上要有2块82550系列的网卡 Good luck关键是那个flash卡究竟长的什么样子？？PCI CF卡不知是否可以
so old

zhanghui · 发表于 2004-7-19 07:33:52

QUOTE (samhui @ Jul 18 2004, 11:39 PM)
so old
what is new ?还有： PIX Version 4.4(7) Compiled on Mon 02-Oct-00 07:07 by pixbuild PIX BIOS Cisco Secure PIX Firewall BIOS 需要专用的bios，没有啊 pixfirewall up 23 secs Hardware: SE440BX2, 128 MB RAM, CPU Pentium II 349 MHz 这个容易实现 Flash strata @ base 0x300 哪里去找？ 0: ethernet0: address is 0002.b304.06e8, irq 11 1: ethernet1: address is 0002.b304.097f, irq 10 2: ethernet2: address is 0090.27bc.5acd, irq 9 这个也好办 Licensed Connections: 128 Serial Number: xxxxxxxx 还需要这个看看，怎么逐一解决？

cloudq · 发表于 2004-7-19 17:00:07

现在知道只需要intel网卡就可以。。。用软盘可以进monitor我发现早期的软盘可以写下整个pix os这样子flash卡都不要了。。。。但是我只启动了一点（vm测试的）

smile787 · 发表于 2004-7-19 20:08:36

理论上应该可以做的成功，一般没有做什么特别的加密处理。再努力！

cloudq · 发表于 2004-7-20 09:03:17

有意讨论的朋友联系我qq:36046540

prettywolf · 发表于 2004-7-20 09:06:20

老大,我有环境可以一试.

cq2000~ · 发表于 2004-7-20 10:59:07

老大,最好给个BIN的下载地址啊

cloudq · 发表于 2004-7-20 13:37:18

我早都传到论坛ftp去了

dragoncn · 发表于 2004-7-21 12:21:30

QUOTE (cloudq @ Jul 20 2004, 01:37 PM)
我早都传到论坛ftp去了
没有bh59.bin啊!

cloudq · 发表于 2004-7-22 08:20:54

名字变了。。最新的叫npxx.bin

dragoncn · 发表于 2004-7-22 09:19:24

不对吧？好象npxx.bin是用来清除口令的．

cloudq · 发表于 2004-7-22 13:57:35

npxx.bin的确可以用来清除口令。。不过是用来进入monitor的

账号		自动登录	找回密码
密码			注册