PIX上装JUNOS成功(PIX硬件解吸初级)--转贴（作者：wilson.scn ）

lovellh

PIX上装JUNOS成功(PIX硬件解吸初级)--转贴（作者：wilson.scn ）今天把PIX拆开，装上显示卡后 点亮： PhoenixBIOS 4.0 Release 6.0 Copyright 1985-1999 Phoenix Technologies Ltd. All Rights Reserved Copyright 1996-1999 Intel Corporation. 4S4EB2X0.87A.0022.P14 Intel Corporation SE440BX-2 Motherboard Serial Number: BLS203900177 Intel?Pentium?II processor 350MHz 128MB System RAM Keyboard...........Detected Event Log message,enter Setup to view ... 把一块装好OLIVE的硬盘加载.... ... login: olive# 说明：PIX上自带的网卡都是台湾生产的INTEL 82559，装JUNOS没问题。 芯片是SLOT1的 PII，还有一快INTEL芯片的ISA的卡不知道派什么用场，CONSOLE是COM1，FAILOVER是COM2。看来X86做防火墙是顶呱呱了 唯一没明白的是它的FLASH那里读出来的？不象是FLOOPY，我按F2进BIOS看他的FIRST BOOTABLE DEVICE的OPTION是选择的REMOVABLE DEVICE。请哪个知道的兄弟，给个更具体的PIX解剖说明。 (PIX->JUNIPER性价比也是很高的。)PIX启动是考FLOOPY把IMAGE读到RAM里去的 Rebooting.... 如果把里面的82559网卡拿出那么他会检测不到硬件而不段REBOOT Cisco Secure PIX Firewall BIOS (3.6) Booting Floppy .................................. PIX floppy loader (3.0) #0: Mon Oct 2 07:02:43 PDT 2000 Reading installation media............. PIX floppy loader (3.0) #0: Mon Oct 2 07:02:43 PDT 2000 Reading installation media..................................... PIX admin loader (3.0) #0: Mon Oct 2 07:02:44 PDT 2000 Flash=i28F640J5 Flash version 4.4.7, Install version 4.4.7 Do you want me to install new version onto flash? [n] No loading from flash... 128MB RAM Flash=i28F640J5 @ 0x300 mcwa i82559 Ethernet at irq 11 MAC: 0002.b308.a0c6 mcwa i82559 Ethernet at irq 10 MAC: 0002.b326.1a09 pixfirewall# show int eth0 interface ethernet0 "outside" is up, line protocol is down Hardware is “”“i82559”“”“ ethernet, address is 0002.b308.a0c6 IP address 127.0.0.1, subnet mask 255.255.255.255 MTU 1500 bytes, BW 10000 Kbit half duplex        0 packets input, 0 bytes, 0 no buffer        Received 0 broadcasts, 0 runts, 0 giants        0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort        0 packets output, 0 bytes, 0 underruns        0 unicast rpf drops        0 output errors, 0 collisions, 0 interface resets        0 babbles, 0 late collisions, 0 deferred        0 lost carrier, 0 no carrier pixfirewall# 看看和OLIVE的ifconfig fxp0多象ISA上的那快东西确定是FLASH无疑了 现在只要按照以下方法就可以把X86变成标标准准的一台PIX520了 下载rawrite.exe,pix529.bin,bh529.bin C:\>rawrite RaWrite 1.2 - Write disk file to raw floppy diskette Enter source file name: bh59.bin Enter destination drive: a: Please insert a formatted diskette into drive A: and press -ENTER- : Number of sectors per track for this disk is 18. Writing image to drive A:. Press ^C to abort. Track: 11 Head: 1 Sector: 16 Done. C:\>0 然后就可以利用floopy进入monitor模式下 monitor> interface 1 0: i8255X @ PCI(bus:0 dev:14 irq:10) 1: i8255X @ PCI(bus:0 dev:13 irq:11) Using 1: i82557 @ PCI(bus:0 dev:13 irq:11), MAC: 0002.b945.a23c monitor> address 172.18.124.154 address 172.18.124.154 monitor> server 172.18.125.3 server 172.18.125.3 monitor> file pix611.bin file pix611.bin monitor> ping 172.18.125.3 Sending 5, 100-byte 0xcde2 ICMP Echoes to 172.18.125.3, timeout is 4 seconds: !!!!! Success rate is 100 percent (5/5) monitor> tftp tftp pix611.bin@172.18.125.3.......................................... Received 2562048 bytes Cisco Secure PIX Firewall admin loader (3.0) #0: Tue Dec 517:35:46 PST 2000 System Flash=E28F128J3 @ 0xfff00000 BIOS Flash=am29f400b @ 0xd8000 Flash version 6.1.1, Install version 6.1.1 Do you wish to copy the install image into flash? [n] y Installing to flash Serial Number: 480380761 (0x1ca20759) Activation Key: 760754d0 39f62229 a4a0245f b5b87e80 Do you want to enter a new activation key? [n] n Writing 2469944 bytes image into flash... 然后A：启动 ................. Firewall>enable Firewall# Firewall# 注意几点 1）安装的时候和OLIVE没区别，显示器上没进度条 2）安装的时候要有ISA或PCI接口的FLASH卡，最好是INTEL的 3）安装的时候PCI上要有2块82550系列的网卡 Good luck

小生怕怕

ISA或PCI接口的FLASH卡，最好是INTEL的 ,容量要多大呢??64M...128M