科技行者

行者学院 转型私董会 科技行者专题报道 网红大战科技行者

知识库

知识库 安全导航

至顶网安全频道无奇不有 在PC上装Cisco PIX OS

无奇不有 在PC上装Cisco PIX OS

  • 扫一扫
    分享文章到微信

  • 扫一扫
    关注官方公众号
    至顶头条

PIX启动是考FLOOPY把IMAGE读到RAM里去的,Rebooting....如果把里面的82559网卡拿出那么他会检测不到硬件而不段REBOOT。

作者:论坛整理 来源:zdnet网络安全 2008年5月25日

关键字: 防火墙 防火墙技术 硬件防火墙

  • 评论
  • 分享微博
  • 分享邮件

  PIX启动是考FLOOPY把IMAGE读到RAM里去的
  Rebooting....
  
  如果把里面的82559网卡拿出那么他会检测不到硬件而不段REBOOT
  
  Cisco Secure PIX Firewall BIOS (3.6)
  
  Booting Floppy
  ..................................
  PIX floppy loader (3.0) #0: Mon Oct 2 07:02:43 PDT 2000
  Reading installation media.............
  
  PIX floppy loader (3.0) #0: Mon Oct 2 07:02:43 PDT 2000
  Reading installation media.....................................
  PIX admin loader (3.0) #0: Mon Oct 2 07:02:44 PDT 2000
  Flash=i28F640J5

  Flash version 4.4.7, Install version 4.4.7

  Do you want me to install new version onto flash? [n] No

  loading from flash...

  

  128MB RAM

  Flash=i28F640J5 @ 0x300

  mcwa i82559 Ethernet at irq 11 MAC: 0002.b308.a0c6

  mcwa i82559 Ethernet at irq 10 MAC: 0002.b326.1a09

  

  pixfirewall# show int eth0

  interface ethernet0 "outside" is up, line protocol is down

  Hardware is “”“i82559”“”“ ethernet, address is 0002.b308.a0c6

  IP address 127.0.0.1, subnet mask 255.255.255.255

  MTU 1500 bytes, BW 10000 Kbit half duplex

  0 packets input, 0 bytes, 0 no buffer

  Received 0 broadcasts, 0 runts, 0 giants

  0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort

  0 packets output, 0 bytes, 0 underruns

  0 unicast rpf drops

  0 output errors, 0 collisions, 0 interface resets

  0 babbles, 0 late collisions, 0 deferred

  0 lost carrier, 0 no carrier

  pixfirewall#

 

  ISA上的那快东西确定是FLASH无疑了

  现在只要按照以下方法就可以把X86变成标标准准的一台PIX520了

  下载rawrite.exe,pix529.bin,bh529.bin

  

  C:>rawrite

  RaWrite 1.2 - Write disk file to raw floppy diskette

  Enter source file name: bh59.bin

  Enter destination drive: a:

  Please insert a formatted diskette into drive A: and press -ENTER- :

  Number of sectors per track for this disk is 18.

  Writing image to drive A:. Press ^C to abort.

  Track: 11 Head: 1 Sector: 16

  Done.

  C:>0

  

  然后就可以利用floopy进入monitor模式下

  

  monitor> interface 1

  0: i8255X @ PCI(bus:0 dev:14 irq:10)

  1: i8255X @ PCI(bus:0 dev:13 irq:11)

  

  Using 1: i82557 @ PCI(bus:0 dev:13 irq:11), MAC: 0002.b945.a23c

  monitor> address 172.18.124.154

  address 172.18.124.154

  monitor> server172.18.125.3

  server 172.18.125.3

  monitor> file pix611.bin

  file pix611.bin

  monitor> ping 172.18.125.3

  Sending 5, 100-byte 0xcde2 ICMP Echoes to 172.18.125.3, timeout is 4 seconds:

  !!!!!

  Success rate is 100 percent (5/5)

  monitor> tftp

  tftp pix611.bin@172.18.125.3..........................................

  Received 2562048 bytes

  

  Cisco Secure PIX Firewall admin loader (3.0) #0: Tue Dec 517:35:46 PST 2000

  System Flash=E28F128J3 @ 0xfff00000

  BIOS Flash=am29f400b @ 0xd8000

  Flash version 6.1.1, Install version 6.1.1

  Do you wish to copy the install image into flash? [n] y

  

  Installing to flash

  Serial Number: 480380761 (0x1ca20759)

  Activation Key: 760754d0 39f62229 a4a0245f b5b87e80

  Do you want to enter a new activation key? [n] n

  Writing 2469944 bytes image into flash...

  然后A:启动

  .................

  Firewall>enable

  Firewall#

  Firewall#

  注意几点

  1)安装的时候和OLIVE没区别,显示器上没进度条

  2)安装的时候要有ISA或PCI接口的FLASH卡,最好是INTEL的

  3)安装的时候PCI上要有2块82550系列的网卡

    • 评论
    • 分享微博
    • 分享邮件
    邮件订阅

    如果您非常迫切的想了解IT领域最新产品与技术信息,那么订阅至顶网技术邮件将是您的最佳途径之一。

    重磅专题
    往期文章
    最新文章