
本方法只是真对没有floppy的PIX,采用TFTP进行文件传输。* ~6 O0 y+ U( T8 o8 u
! X% K! z {4 C3 u1、准备:! @, t& D, l4 O6 ~( B0 E g& d! D( k
8 H' n/ Y: u$ ^0 ]( n/ y9 E9 e 1)PC一台,其上安装TFTP服务器
& I+ g h2 E j- j. ?! N2 M9 c8 I/ S/ q: e8 S4 m0 T
2)交叉线一条,连接PIX以太网口和PC网卡
1 G- D+ E( b1 c$ w
2 v6 f+ j6 E, f% _8 D 3)下载密码恢复软件(根据PIXOS的版本选择不同的恢复软件),放到TFTP服务器的目录下,. `+ q# j- g/ L$ ~0 o/ m" u
4 N' k) b& h! N& |
2、网络拓扑示意图
6 h7 m- `* |3 W% u* Q; o
% {5 Q* c$ C6 p! `" A 7 y& J' ?2 V7 G5 I$ M, i/ @" F
& R' H$ N8 f. \; }# W: v4 a# w3、详细恢复过程:5 E/ V. \/ @& o" R+ M5 Z
9 A ~( ^0 q, ]8 u2 L6 v3 c3 c
5 W7 I0 G% r& C X* P启动PIX,ctrl+breack,进入到monitor>模式下,执行下面的操作:
- d+ S* m6 y4 g2 n( g8 N
) g; ?. z2 b$ W, C- }monitor> interface 0 0: i8255X @ PCI(bus:0 dev:13 irq:10) 1: i8255X @ PCI(bus:0 dev:14 irq:7 ) Using 0: i82559 @ PCI(bus:0 dev:13 irq:10), MAC:
& o" H& ?: H% l% n7 s1 _0 U. x9 f( P2 V" f/ ]9 o
0050.54ff.82b9 monitor> address 192.168.18.111 address 192.168.18.111 monitor> server 192.168.18.254 server 192.168.18.111 monitor> file np63.bin file 1 D C$ Q( Q; I1 r
& s; S. L5 g! U5 n2 i
np63.bin monitor> gateway 192.168.18.254 gateway 192.168.18.254 monitor> ping 192.168.18.254 Sending 5, 100-byte 0xf8d3 ICMP Echoes to 192.168.18.254,
( W& y4 s4 Z+ e. i& ]+ h" @( J& e$ E+ C
timeout is 4 seconds: !!!!! Success rate is 100 percent (5/5) monitor> tftp tftp np63.bin@192.168.18.254 via
) q& i& |# i, R: b2 X7 d" J
7 N8 B# @6 t3 w6 r R* u- \& o192.168.18.254................................... Received 92160 bytes Cisco Secure PIX Firewall password tool (3.0) #0: Tue Aug 22 23:22:19 PDT 2000 4 W/ }+ Q4 j. X! ?2 Y3 C1 p$ i, S
) v r* x' c& @- c, {Flash=i28F640J5 @ 0x300 BIOS Flash=AT29C257 @ 0xd8000 Do you wish to erase the passwords? [yn] y Passwords have been erased. Rebooting....重新启动后就可以了
+ D2 ?8 A0 ]0 E8 M6 L3 n0 E1 u' v9 _9 i, f, H: e8 i' q# k
!
# H$ k$ ?: r7 @) d6 @% ]+ T8 l
+ V$ F) b9 w m w, h0 f
3 y. M) I. \2 @, a) L+ n8 i4、相关软件:根据PIX的不同OS版本进行选择。np50 np51 np52 np53 np60 np61 np62 np63 np70 9 S. T/ j) x1 H
) o9 M |1 k5 \& ]1 P
) \$ j8 }2 l6 }1 \- }- G8 g0 o6 s9 L
|
|