FrankenPIX

Howto build one ( ver 0.1 )

As i was a bit tired to explain everyone how to build this unix i wrote this small how2.

You will need:

on 2 MB card you can install max. PixOS 5.2.1 ( newer version is not supported on this card )
on 16 MB you can install almost newest ( a bit od dependency of mobo, but i can't tell what model couse i dont have now 16 MB card )

karta
( from CCO )


After assembly you will need files for pix : pix515.bin and bh515.bin

bh515.bin you will put on floppy using rawrite.exe ( or on linux box : dd if=bh515.bin of=/dev/fd0 )
C:\>rawrite
RaWrite 1.2 - Write disk file to raw floppy diskette
Enter source file name: bh515.bin
Enter destination drive: a:
Please insert a formatted diskette into drive A: and press -ENTER- :
Number of sectors per track for this disk is 18.
Writing image to drive A:. Press ^C to abort.
Track: 11 Head: 1 Sector: 16
Done.
C:\>0


after booting you can install your new pixos from TFTP server.

( from CCO  )
  1. Copy the PIX Firewall binary image (pixnnn.bin) to the root directory of the TFTP server.

  2. For PIX Classic, 10000, 510 and 520s use the procedure for Creating a Bootable Diskette. Use the boothelper file that most closely corresponds to the PIX image you are upgrading to. Boot the PIX from the boothelper floppy to enter the boothelper mode.

    All other PIX devices (501, 506, 515, 525 and 535) do not contain a floppy drive; instead, they have an internal boot monitor mode. Please see the instructions for Entering Monitor Mode on a PIX 501, 506, 515, 525 or 535.

    Once in monitor or boothelper mode, you can use the ? key to see a list of available options.

  3. Type interface number The interface command specifies which PIX interface the TFTP server is connected out of. The default is interface 1 (inside).

    Note: The PIX Firewall cannot initialize a Gigabit Ethernet interface from monitor or boothelper mode. Use a Fast Ethernet or Token Ring interface instead.

  4. Type address pix_interface_ip_address The address command specifies the IP address of the PIX Firewall unit's interface.

  5. Type server tftp_server_ip_address The server command specifies the TFTP server's IP address.

  6. Type file filename The file command specifies the filename of the PIX Firewall image.

  7. Type ping tftp_server_ip_address Ping the server to verify accessibility. If this command fails, double-check your cables, IP address of the server and of the PIX, and IP address of the gateway (if needed). The pings must succeed before you can continue.

    Note: Use the gateway command to specify the IP address of a router gateway through which the server is accessible: gateway ip_address of the gateway interface

  8. Type tftp to start the download of image from the TFTP server.

  9. After the image downloads, you are prompted to install the new image. Enter y to install the image to Flash.

  10. When prompted to enter a new activation key, enter y if you wish to enter a new activation key, or n to keep your existing activation key. See Upgrading the Activation Key for more information about the activation key and how to obtain a new one.

  11. If you used the boothelper mode, you are prompted to remove the boothelper diskette. You have 30 seconds to remove the diskette before the PIX automatically reboots. Please remove the diskette now. Once the PIX reboots it will load the new image from Flash.

    This completes the upgrade process.

example

monitor> interface 1 
0: i8255X @ PCI(bus:0 dev:14 irq:10)
1: i8255X @ PCI(bus:0 dev:13 irq:11)

Using 1: i82557 @ PCI(bus:0 dev:13 irq:11), MAC: 0002.b945.a23c
monitor> address 172.18.124.154
address 172.18.124.154
monitor> server 172.18.125.3
server 172.18.125.3
monitor> file pix611.bin
file pix611.bin
monitor> ping 172.18.125.3
Sending 5, 100-byte 0xcde2 ICMP Echoes to 172.18.125.3, timeout is 4 seconds:
!!!!!
Success rate is 100 percent (5/5)
monitor> tftp
tftp pix611.bin@172.18.125.3..........................................
Received 2562048 bytes

Cisco Secure PIX Firewall admin loader (3.0) #0: Tue Dec 517:35:46 PST 2000
System Flash=E28F128J3 @ 0xfff00000
BIOS Flash=am29f400b @ 0xd8000
Flash version 6.1.1, Install version 6.1.1
Do you wish to copy the install image into flash? [n] y

Installing to flash

Serial Number: 480380761 (0x1ca20759)
Activation Key: 760754d0 39f62229 a4a0245f b5b87e80

Do you want to enter a new activation key? [n] n

Writing 2469944 bytes image into flash...

Free DES PIX key :https://www.cisco.com/pcgi-bin/Software/FormManager/formgenerator.pl?pid=221&fid=324

pix