首先去https://tools.cisco.com/SWIFT/Licensing/PrivateRegistrationServlet申 请一个新的key,CISCO会提示我们输入PIX的serial number。在PIX上找一下,在电源插口附近肯定能找到相应的标签,将标签上的数字输入CCO对话框中,不用多久cisco就会将key寄到你的 email。
申请des加密的key是免费的,申请3des/aes加密的key需要有Partner以上等级的权限。
monitor> interface 1
0: i8255X @ PCI(bus:0 dev:13 irq:10)
1: i8255X @ PCI(bus:0 dev:14 irq:7 )
2: i8255X @ PCI(bus:0 dev:17 irq:9 )
Using 1: i82559 @ PCI(bus:0 dev:14 irq:7 ), MAC: 0001.64ff.cd57
monitor> address 192.168.10.244
address 192.168.10.244 ------------------------------------pix的地址.
monitor> server 192.168.10.5 -------------------------------pc机的地址.
server 192.168.10.5
monitor> file pix634.bin
file pix634.bin ---------------------------------------------------pc-server上的IOS的文件名.
monitor> tftp
tftp [email protected]...............................................
............................................................................................
............................................................................................
...........................................................
Received 2082816 bytes
Cisco Secure PIX Firewall admin loader (3.0) #0: Thu Jul 1 23:49:40 PDT 2004
Flash=i28F640J5 @ 0x300
BIOS Flash=AT29C257 @ 0xd8000
Flash version 6.3.4, Install version 6.3.4
Installing to flash
Serial Number: 480380360 (0x1ca205c8)
Activation Key: 0 0 0 0
Do you want to enter a new activation key? [n]y
Enter Activation Key
Part 1 of 4: ca6b4fbd
Part 2 of 4: cbad753b
Part 3 of 4: 22274aad
Part 4 of 4: 9f1be105
Writing 1966136 bytes p_w_picpath into flash...
###########################################################################
####################################
128MB RAM
mcwa i82559 Ethernet at irq 10 MAC: 0001.64ff.cd56
mcwa i82559 Ethernet at irq 7 MAC: 0001.64ff.cd57
mcwa i82558 Ethernet at irq 9 MAC: 0008.c78c.ad56
Flash=i28F640J5 @ 0x300
BIOS Flash=AT29C257 @ 0xfffd8000
-----------------------------------------------------------------------
|| ||
|| ||
|||| ||||
..:||||||:..:||||||:..
c i s c o S y s t e m s
Private Internet eXchange
-----------------------------------------------------------------------
Cisco PIX Firewall
Cisco PIX Firewall Version 6.3(4)
Licensed Features:
Failover: Disabled
×××-DES: Enabled
×××-3DES-AES: Enabled
Maximum Physical Interfaces: 3
Maximum Interfaces: 5
Cut-through Proxy: Enabled
Guards: Enabled
URL-filtering: Enabled
Inside Hosts: Unlimited
Throughput: Unlimited
IKE peers: Unlimited
This PIX has a Restricted (R) license.
****************************** Warning *******************************
Compliance with U.S. Export Laws and Regulations - Encryption.
This product performs encryption and is regulated for export
by the U.S. Government.
This product is not authorized for use by persons located
outside the United States and Canada that do not have prior
approval from Cisco Systems, Inc. or the U.S. Government.
This product may not be exported outside the U.S. and Canada
either by physical or electronic means without PRIOR approval
of Cisco Systems, Inc. or the U.S. Government.
Persons outside the U.S. and Canada may not re-export, resell
or transfer this product by either physical or electronic means
without prior approval of Cisco Systems, Inc. or the U.S.
Government.
******************************* Warning *******************************
Copyright (c) 1996-2003 by Cisco Systems, Inc.
Restricted Rights Legend
Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, California 95134-1706
Cryptochecksum(changed): d41d8cd9 8f00b204 e9800998 ecf8427e
Pre-configure PIX Firewall now through interactive prompts [yes]? n
Type help or '?' for a list of available commands.
pixfirewall>en
pixfirewall#cony tftp flash ---------------------------------------------------------保存ios到flash.