Cisco PIX 525 Especificaciones descargar pdf (Pagina 397)

11-15

Cisco PIX Firewall and VPN Configuration Guide

78-15033-01

Chapter 11 Changing Feature Licenses and System Software

TFTP Download Error Codes

Step 1 Connect a separate console to the primary unit and one to the secondary unit.

Step 2 Reload both PIX Firewall units, and bring them to monitor mode.

Step 3 On the primary unit, use monitor mode TFTP to load the new PIX Firewall image. You will want to save

the image to Flash memory and let it boot up. Enter a show failover command to ensure everything looks

fine.

Step 4 Repeat Step 3 on the secondary unit.

Step 5 Once the standby (secondary) unit completes booting and is up, the active (primary) unit will start to

synchronize the configuration from the primary unit to the secondary. Wait until the configuration

replication is finished, then use the show failover command on both PIX

Firewall units to ensure the

failover is running correctly.

Upgrading Failover Systems Using Boothelper

Complete the following steps for a PIX Firewall with a floppy diskette drive:

Step 1 Connect a separate console to the primary unit and one to the secondary unit.

Step 2 Place the boothelper diskette in the diskette drive of the primary unit and reboot the system.

When the PIX Firewall starts, the pixboothelper> prompt appears.

Step 3 As the primary unit reboots, PIX Firewall prompts you to write the image to Flash memory. Before

entering a reply, read the next three substeps and be ready to move quickly to complete them. When

ready, enter

y for yes at the prompt.

a. Immediately remove the diskette from the primary unit and insert it into the standby unit. Locate the

reset button on the front of the standby unit.

b. When the PIX Firewall Cisco banner appears on the primary unit’s console, press the reset button

on the standby unit to load the new image.

c. On the primary unit, enter the show failover command to make sure the primary unit is active and

the secondary unit is in standby mode after the upgrade of the primary unit.

Step 4 Wait for the standby unit to finish booting. Once the standby unit is up, the two units synchronize during

which time the primary unit’s console does not accept input. On the standby unit, use the show failover

command to monitor progress. When both PIX

Firewall units report Normal, the replication is done.

TFTP Download Error Codes

Note If the PIX Firewall hangs during a TFTP file transfer, press Esc to abort the TFTP session and return to

the command prompt.

During a TFTP download, if tracing is on, non-fatal errors appear in the midst of dots that display as the

software downloads. The error code appears inside angle brackets.

Table 11-2 lists the error code values.

For example, random bad blocks appear as follows:

1 2 ... 392 393 394 395 396 397 398 399 400 401 402 ... 465 466

Sin comentarios

Cisco PIX 525 Especificaciones Pagina 397