PIX520从4.4升级到6.3(5)的过程

2008-04-02 10:59:14来源：互联网阅读 ()

1.备份配置
PIX#write net 192.168.1.1:backuppix

2.制作启动软盘

引用内容： C:\pix> rawrite

RaWrite 1.2 - Write disk file to raw floppy diskette

Enter source file name: bh61.bin

Enter destination drive: a:

Please insert a formatted diskette into drive A: and press -ENTER- :

Number of sectors per track for this disk is 18

Writing image to drive A:. Press ^C to abort.

Track: 78 Head: 1 Sector: 16

Done.

*bh61.bin在Cisco网站上下载

3.检查系统配置是否满足6.3(5)要求
引用内容： PIX>show version
PIX Version 4.4(4)

Compiled on Thu 06-Jan-00 16:07 by pixbuild

pix_chongqinga up 3 mins 20 secs

Hardware: SE440BX2, 128 MB RAM, CPU Pentium II 349 MHz

Flash strata @ base 0x300

0: ethernet0: address is 0002.b303.e528, irq 11

1: ethernet1: address is 0090.279b.a0eb, irq 15

2: ethernet2: address is 0002.b303.e3a8, irq 10

3: ethernet3: address is 0090.2751.d6a0, irq 9

Licensed Connections: 1024

Serial Number: 10204454

主要检查内存容量和闪存容量

[开始升级]
1.插入刚才制作好的启动软盘，启动PIX
引用内容： Cisco Secure PIX Firewall BIOS (3.6)

Booting Floppy

.................................. Cisco Secure PIX Firewall floppy loader (3.0) #0: Tue Sep 11 07:34:46 PDT 2001
Reading installation media.............. 128MB RAM
mcwa i82559 Ethernet at irq 11 MAC: 0002.b303.e528
mcwa i82559 Ethernet at irq 15 MAC: 0090.279b.a0eb
mcwa i82559 Ethernet at irq 10 MAC: 0002.b303.e3a8
mcwa i82559 Ethernet at irq 9 MAC: 0090.2751.d6a0
Flash=i28F640J5 @ 0x300
BIOS Flash=AT29C257 @ 0xfffd8000

-----------------------------------------------------------------------
|| ||
|| ||
|||| ||||
..:||||||:..:||||||:..
c i s c o S y s t e m s
Private Internet eXchange
-----------------------------------------------------------------------
Cisco PIX Boothelper

Cisco PIX Firewall Version 6.1(1)

pixboothelper>

*启动之后提示符为:pixboothelper>

2.配置相应参数

引用内容： pixboothelper> interface 1

current interface is 1

0: i82557 @ PCI(bus:0 dev:13 irq:11) ethernet0 not_init

1: i82557 @ PCI(bus:0 dev:14 irq:15) ethernet1 100full

2: i82557 @ PCI(bus:0 dev:15 irq:10) ethernet2 not_init

3: i82557 @ PCI(bus:0 dev:16 irq: 9) ethernet3 not_init

pixboothelper> address 192.168.1.1 255.255.255.0

address: 192.168.1.1

pixboothelper> server 192.168.1.2

server 192.168.1.2

pixboothelper> ping 192.168.1.2

192.168.1.2 NO response received -- 1000ms

192.168.1.2 NO response received -- 1000ms

192.168.1.2 NO response received -- 1000ms

**Ping不通192.168.1.2是因为主机上设置了防火墙
但是在主机这段可以看到192.168.1.1的arp解析，说明两者能够正常通讯
**前提是主机已经设置正确IP地址，以及网口和PIX的第二口正常连通。

3.升级

引用内容： pixboothelper> tftp

tftp pix635.bin@192.168.1.3

Received 2101248 bytes.

Flash version 4.4(4), Install version 6.3(5)

Installing to flash

Serial Number: 18026694 (0x11310c6)

Activation Key: 2d890a17 f44c5fa6 a963ccf5 996782d8

Do you want to enter a new activation key? [n]

Writing 1978424 bytes image into flash...

Ready to reboot, please remove the disk.

取出软盘，重启

4.重启验证升级是否成功

引用内容： pixfirewall>show version
Cisco PIX Firewall Version 6.3(5)

Compiled on Thu 04-Aug-05 21:40 by morlee

pixfirewall up 32 secs

Hardware: SE440BX2, 128 MB RAM, CPU Pentium II 350 MHz

Flash i28F640J5 @ 0x300, 16MB

BIOS Flash AT29C257 @ 0xfffd8000, 32KB

0: ethernet0: address is 0002.b303.e528, irq 11

1: ethernet1: address is 0090.279b.a0eb, irq 15

2: ethernet2: address is 0002.b303.e3a8, irq 10

3: ethernet3: address is 0090.2751.d6a0, irq 9

Licensed connections: 1024

Serial Number: 18026694 (0x11310c6)

Running Activation Key: 0x2d890a17 0xf44c5fa6 0xa963ccf5 0x996782d8

Configuration has not been modified since last system restart.

我们可以看到PIX已经成功升级到6.3(5)这个版本

标签：

版权申明：本站文章部分自网络，如有侵权，请联系：west999com@outlook.com
特别注意：本站所有转载文章言论不代表本站观点，本站所提供的摄影照片，插画，设计作品，如需使用，请与原作者联系，版权归原作者所有