PIX 515 Password Recovery

zillah

I am sure this has been answered already but I could not come up with anything on a search

Anyone have another angle we aren't thinking of?

www.cisco.com/warp/public/110/34.shtml
or
http://www.tech-recipes.com/cisco_firewall_tips639.html

What I did
monitor> interface 0
0: i8255X @ PCI(bus:0 dev:14 irq:10)
1: i8255X @ PCI(bus:0 dev:13 irq:11)
2: i8255X @ PCI(bus:0 dev:17 irq:11)
Using 0: i82557 @ PCI(bus:0 dev:14 irq:10), MAC: 0014.6971.2b50
monitor> address 192.168.1.1
address 192.168.1.1
monitor> server 192.168.1.5
server 192.168.1.5
monitor> file np63.bin
file np63.bin
monitor> tftp
tftp nppix.bin@192.168.1.5
TFTP failed (return:-10 arg:0x1)

I do not why it did fail ? I could not ping the PIX either, I do not have any firewall on my Laptop

mikej412

Are you directly connected via a cross-over cable to the laptop? Same subnet? No typos in subnet mask? Do you see anything in the arp cache on the PC for the PIX? Are you sure you're plugged into the correct interface on the PIX?

Nothing like having to troubleshoot a network connections in the middle of another issue.

Good Luck!

zillah

Are you directly connected via a cross-over cable to the laptop?

Yes

Same subnet?

Yes

Do you see anything in the arp cache on the PC for the PIX?

I will check this

Are you sure you're plugged into the correct interface on the PIX?

Does it matter if it is interface 0 or interface 1 ?

mikej412

zillah wrote:

Does it matter if it is interface 0 or interface 1 ?

Yes, use the one that works!

It should be defaulting to the inside interface -- but if one interface isn't working, try the other one.

zillah

I used cisco TFTP server instead of PumpKIN, and it worked

Ahriakin

I had this happen before and am not sure but I think it had something to do with the user rights on the folder I was using. I had full access but I THINK I had to set it to everyone full-control before it worked properly, maybe some TFTP software uses the system account rather than the logged in user and if you have a folder where you removed everyone else (admins/system etc) but yourself it may cause the problem. Not sure though, just a foggy memory.

zillah

Thanks for sharing