本站已运行

攻城狮论坛

作者: kozen
查看: 3917|回复: 14

主题标签Tag

more +今日重磅推荐Recommend No.1

所有IT类厂商认证考试题库下载所有IT类厂商认证考试题库下载

more +随机图赏Gallery

【新盟教育】2023最新华为HCIA全套视频合集【网工基础全覆盖】---国sir公开课合集【新盟教育】2023最新华为HCIA全套视频合集【网工基础全覆盖】---国sir公开课合集
【新盟教育】网工小白必看的!2023最新版华为认证HCIA Datacom零基础全套实战课【新盟教育】网工小白必看的!2023最新版华为认证HCIA Datacom零基础全套实战课
原创_超融合自动化运维工具cvTools原创_超融合自动化运维工具cvTools
重量级~~30多套JAVA就业班全套 视频教程(请尽快下载,链接失效后不补)重量级~~30多套JAVA就业班全套 视频教程(请尽快下载,链接失效后不补)
链接已失效【超过几百G】EVE 国内和国外镜像 全有了 百度群分享链接已失效【超过几百G】EVE 国内和国外镜像 全有了 百度群分享
某linux大佬,积累多年的电子书(约300本)某linux大佬,积累多年的电子书(约300本)
乾颐堂现任明教教主Python完整版乾颐堂现任明教教主Python完整版
乾颐堂 教主技术进化论 2018-2019年 最新31-50期合集视频(各种最新技术杂谈视频)乾颐堂 教主技术进化论 2018-2019年 最新31-50期合集视频(各种最新技术杂谈视频)
Python学习视频 0起点视频 入门到项目实战篇 Python3.5.2视频教程 共847集 能学102天Python学习视频 0起点视频 入门到项目实战篇 Python3.5.2视频教程 共847集 能学102天
约21套Python视频合集 核心基础视频教程(共310G,已压缩)约21套Python视频合集 核心基础视频教程(共310G,已压缩)
最新20180811录制 IT爱好者-清风羽毛 - 网络安全IPSec VPN实验指南视频教程最新20180811录制 IT爱好者-清风羽毛 - 网络安全IPSec VPN实验指南视频教程
最新20180807录制EVE开机自启动虚拟路由器并桥接物理网卡充当思科路由器最新20180807录制EVE开机自启动虚拟路由器并桥接物理网卡充当思科路由器

[安全] 【求助】PIX515E升级到7.04的问题,出现“ERROR: Command requires failover license ...

[复制链接]
kozen [Lv4 初露锋芒] 发表于 2013-1-30 04:24:13 | 显示全部楼层 |阅读模式
查看: 3917|回复: 14
开通VIP 免金币+免回帖+批量下载+无广告
将一台PIX515E从6.3升级到了7.04,在startup-config中出现了两行“ERROR: Command requires failover license”。结果在启动时出现如下提示,我估计大概意思是无法解释的命令
0 C5 ]% Z- J1 |1 o# ~# X3 i/ j: }* f( T5 W9 N
ERROR: Command requires failover license
( ^1 o4 s+ \; G% \# } ^2 r# T/ y- G3 S$ l  [! c2 ^
ERROR: % Invalid input detected at '^' marker.
, G5 `3 D. c( B0 t4 M% H( F6 l*** Output from config line 28, "ERROR: Command requires ..."
8 |0 G  t8 A2 ^  i4 R
* ^8 W/ H& z" E1 p6 p' _ERROR: Command requires failover license
/ ?  Q$ }! g! u ^
# |8 D0 B- w7 b9 A) [3 g# MERROR: % Invalid input detected at '^' marker.! w% R5 G. }, C
*** Output from config line 29, "ERROR: Command requires ..."" p- V5 ?. g. K8 H, Z4 D
.6 h0 H7 D9 t/ g+ y/ L8 _
下面贴的东西比较多,希望各位高手能耐心看一下并给点提示,这两行是如何产生的,如何去掉。不胜感激!!!
1 u/ o& [3 m" Q2 n2 B& b% w! O3 @* _===========================================3 \" z1 ^% ^1 m
升级前的配置如下:
1 i. ]) J8 I3 n5 M$ S( M( D5 mwrpix# sh run' V# l: s. g" p; ^; |
: Saved- Y5 }7 x: Q( l! Q7 E
:9 Q. v$ a  @9 w4 H3 t+ ~* c
PIX Version 6.3(3)
# i5 y  b( D7 R9 S# Qinterface ethernet0 auto
: ^1 A) D- n+ M8 k3 Y* u8 H' @  binterface ethernet1 auto9 }! ~- h* z8 P$ L5 q  ]7 C7 r
nameif ethernet0 outside security0
- y: Q6 n6 y- u0 ^" d6 g+ v4 {3 vnameif ethernet1 inside security100
8 p( f; Q5 t1 z$ r) }$ p) _enable password wZWJ2KQ9pd8W/koS encrypted% \4 P7 G7 x: }2 R* @
passwd wZWJ2KQ9pd8W/koS encrypted
' J7 W$ p3 X9 g4 |5 Ahostname wrpix
- D, U# q. f5 |. L6 e+ t# z. H  idomain-name xxxxxx.com
, I* Y$ F) R( y* v/ o1 cclock timezone CST 80 P- w6 l, a* q9 i3 B5 V' J5 k
fixup protocol dns maximum-length 5122 ~+ i6 a& r$ E, H
fixup protocol ftp 218 `" _9 L' M7 D# p7 ^. x3 h% `
fixup protocol h323 h225 1720
) F1 |7 M/ T: o) A2 afixup protocol h323 ras 1718-1719! h- E/ k  g/ @2 Q5 ?+ v% e
fixup protocol http 802 @; x' u( h+ g" {, e
fixup protocol rsh 514% X8 e! B5 M" }* K! O9 {
fixup protocol rtsp 554
! Z* P) v/ |( Z' {2 d$ C+ ufixup protocol sip 5060
+ u2 [! x8 i/ e8 {1 h; k9 Vfixup protocol sip udp 5060; U1 e6 `6 ]3 k- `
no fixup protocol skinny 2000, {: o& Q0 c* O& b' t
fixup protocol smtp 25
8 ?4 E* z1 h+ F+ f" Ofixup protocol sqlnet 1521
( m' h# s$ R' o6 u# z" m* afixup protocol tftp 69
8 l3 ~/ V; U9 d& P2 _names. _  a& @' Y7 Z( }9 n$ B  t9 \9 T' P  d
pager lines 24$ g% f, J' V8 }$ i9 [5 {) l: E
mtu outside 15006 N, O) Q. c! f5 K1 b# Y; Z
mtu inside 1500; Y+ c8 `1 [0 @4 V
ip address outside 61.232.xxx.xx 255.255.255.128% L# h/ S* d, B9 N2 z+ g
ip address inside 192.168.4.254 255.255.255.0
) h! s' t0 q* l) }2 c' U$ xip audit info action alarm
, h) X0 H2 L; }# ]- e) r7 _  lip audit attack action alarm
- \9 Q$ B/ V% r1 n8 E) epdm location 192.168.4.252 255.255.255.255 inside
7 P0 J+ t8 S; Hpdm history enable5 u, j  ]8 D7 w6 \& P) \0 v$ ]
arp timeout 14400
9 n* U, w6 A& j' |3 Qglobal (outside) 1 interface
. q- B3 J0 b+ u+ z% hnat (inside) 1 0.0.0.0 0.0.0.0 0 00 D' \) F: }1 s: e% e8 B
static (inside,outside) tcp 61.232.xxx.xx 21912 192.168.4.252 21912 netmask 255.255.255.255 0 0 1 W# A; v6 d. n2 P2 z2 H1 T
static (inside,outside) tcp 61.232.xxx.xx 4662 192.168.4.252 4662 netmask 255.255.255.255 0 0
( f0 G: N! S- S: E5 p9 Istatic (inside,outside) tcp 61.232.xxx.xx pcanywhere-data 192.168.4.252 pcanywhere-data netmask 255.255.255.255 0 0
' j8 \& ~- r7 {! z* pstatic (inside,outside) udp 61.232.xxx.xxx 21912 192.168.4.252 21912 netmask 255.255.255.255 0 0
! k1 O, ?- f' Kstatic (inside,outside) udp 61.232.xxx.xx 4662 192.168.4.252 4662 netmask 255.255.255.255 0 0 ( J) ^8 n# A& [* }
conduit permit tcp any any # d1 r. l  e# C2 h* q! U& T- F
conduit permit udp any any
3 \2 ~/ u; ~! H& U5 f0 Pconduit permit icmp any any / }' {6 U& Q" r8 n
conduit permit ip any any
, K, k6 O9 j& ~1 kroute outside 0.0.0.0 0.0.0.0 61.232.xxx.x 1 //
1 v* z$ \7 v2 m- n+ }0 Atimeout xlate 3:00:00
+ S. F7 S8 \( ^) r4 O# x& e+ ttimeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h225 1:00:00
9 h4 r1 Z* n* `9 F4 Ctimeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:004 u1 z2 V: U3 f: Q+ Y; p  [8 Z; ?
timeout uauth 0:05:00 absolute% K5 ^3 V1 l7 [) y: O; t
aaa-server TACACS+ protocol tacacs+ 3 F1 n: Z6 s  F; K' F. U% F+ {6 g
aaa-server RADIUS protocol radius 9 H3 C+ G% r9 Y) y6 z
aaa-server LOCAL protocol local 2 ^+ W! Z) e1 h! \
http server enable& S9 m2 e  f" @. N- F0 K9 V
http 192.168.4.0 255.255.255.0 inside/ [# ^) C/ k2 e$ n, _7 a
no snmp-server location$ P" l! ~- j% B% ]$ y
no snmp-server contact% [& J( M& H) a' k3 i
snmp-server community public1 s/ |4 c" D' R2 Z4 B/ `; s1 L; B
no snmp-server enable traps
4 S5 j7 c* w3 X1 ?- Y/ ]floodguard enable4 F4 C2 f/ k0 i5 m4 f
telnet 0.0.0.0 0.0.0.0 inside7 {, ]9 |. E& I' {  B) r
telnet timeout 5
3 c! e) |8 y' g: v: m5 rssh 0.0.0.0 0.0.0.0 outside
) e! ]7 L8 F: R6 X% }ssh timeout 5
9 O# d9 N3 u  h' N0 f9 Aconsole timeout 0
) F2 T* K# v0 E& Mterminal width 80
$ ]" m2 w$ W* _9 cCryptochecksum:b6e5e8d833cf20a5bee5bda0281dd82f
2 D  s/ j" ]+ c# H- U) r" f: end
' @& v* \6 ^3 L# j* kwrpix# 5 [7 {/ g7 o+ w$ x8 q# s3 o$ P

$ b/ A/ i5 R, s8 e& L2 e/ C! W2 x; U" g0 t! ~. c6 z" R
  y8 x% V% N4 `2 i: p( s$ f+ a
4 [6 o/ _- {0 }% h) {+ S. i1 ]
=======================================================9 T" q7 x5 F: _; [6 X8 U) i' n% `
升级后的startup-config如下
3 ^. ~# a) |$ W" ]) \# T  A( J: Saved
5 S7 e+ E( [, t3 p0 H, K$ N* ?: Written by enable_15 at 13:45:02.834 CST Fri Sep 29 2006" w3 ?: @. A' D' _1 b$ S  \
!
) i8 N, T/ [0 S& E. T$ \/ D9 o/ RPIX Version 7.0(4) 8 ]( p3 A1 o1 @$ ?
!: J7 [$ X2 O, n
hostname wrpix
5 r  J+ x' w+ d( P) I+ n* Rdomain-name xxxxxxx.com
9 s. ?  ]  [; f1 ?' r# @2 q6 ?( genable password wZWJ2KQ9pd8W/koS encrypted
/ M! o3 s3 v' knames
( X$ }/ b9 w) U  t3 K% \!
% x3 T% q6 S7 X2 Rinterface Ethernet0; _+ ]( P) f- X" c/ [8 ~
nameif outside
2 W$ m7 R- G0 D0 j! E/ Y  o3 x, D$ C security-level 05 U# k) G" h; W+ M0 O# a4 h
ip address 61.232.xxx.xx 255.255.255.128
4 a) Y: ~# h0 }!, |- V. L# e0 ~* A* L
interface Ethernet1) b, _( n% `6 F; ]  O
nameif inside" |; H9 M( i, ]" X2 `' Q$ Y2 J
security-level 100' L- h5 z4 W% a7 W
ip address 192.168.4.254 255.255.255.0
, A$ @4 P. P  ]3 L+ t8 S2 G!! k* q% {, P6 k2 H5 z% U6 k% u1 }
passwd wZWJ2KQ9pd8W/koS encrypted8 a4 {0 a3 }' w% I8 Z/ T1 D
boot system flash:/pix704.bin
5 ]! f# S5 j0 f. Y' p" W7 Bftp mode passive
) X8 x8 ^+ v2 f% g& }7 xclock timezone CST 8# Z( U+ H# [' H0 h6 M+ N: g" D, e* u
pager lines 24
6 F* }8 ]; X, J/ L2 h2 ]mtu outside 1500
$ E9 `$ n" S+ Y3 {mtu inside 15002 i) ^) o! e% Q7 p/ j+ ]+ d
ERROR: Command requires failover license //出错的地方
( v: T1 w3 J# C$ Z8 cERROR: Command requires failover license //出错的地方5 @! H; Q* k( l# U# a& {0 S
asdm image flash:/asdm-504.bin4 {0 ~" D0 d% s- g
asdm location 192.168.4.252 255.255.255.255 inside$ j# \7 O+ I2 a, u  Y  S' f: n
asdm history enable  a8 Y+ W0 t* I0 M; t! I+ k: G! _& `- o
arp timeout 14400
* ^( V: ^8 B& @4 R  znat-control$ e9 b* X  n, O
global (outside) 1 interface
, ~( R: O5 K$ u" s6 A: x+ V2 snat (inside) 1 0.0.0.0 0.0.0.0
, d! W$ \- A  s2 H4 Q' qstatic (inside,outside) tcp 61.232.xxx.xx 21912 192.168.4.252 21912 netmask 255.255.255.255 ) G& |% n* g- Z- j- X, G# z
static (inside,outside) tcp 61.232.xxx.xx 4662 192.168.4.252 4662 netmask 255.255.255.255
# q$ c" }& n5 n$ w' gstatic (inside,outside) tcp 61.232.xxx.xx pcanywhere-data 192.168.4.252 pcanywhere-data netmask 255.255.255.255
% Y  q2 X4 e$ G; V# wstatic (inside,outside) udp 61.232.xxx.xxx 21912 192.168.4.252 21912 netmask 255.255.255.255
6 n( M; x. s( {6 Lstatic (inside,outside) udp 61.232.xxx.xx 4662 192.168.4.252 4662 netmask 255.255.255.255 4 ?2 ]" R& z1 O# O& _
route outside 0.0.0.0 0.0.0.0 61.232.xxx.x 1
5 R$ ]; O6 L$ s' r# vtimeout xlate 3:00:00$ r8 N5 U) t& R! M0 _( R' z
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
+ K7 Y7 g2 C& q7 }timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00
+ E; m' n: `, X0 _* p% I, K/ I$ t+ Utimeout mgcp-pat 0:05:00 sip 0:30:00 sip_media 0:02:00
# }. g" Y. N) l* n2 L4 Etimeout uauth 0:05:00 absolute; R9 {' S+ x8 f8 B. r
aaa-server TACACS+ protocol tacacs+
& _2 j2 c, o) X4 |aaa-server RADIUS protocol radius$ r! ?0 f1 I5 ?3 z
http server enable$ Y; c/ |7 y. g, I
http 192.168.4.0 255.255.255.0 inside
$ \. t! U& {( sno snmp-server location
0 j  l# t. h1 B0 U  Bno snmp-server contact
. v- A0 ~4 W5 Q5 e  x7 ?snmp-server community public- }9 c& K( h4 V0 W
snmp-server enable traps snmp authentication linkup linkdown coldstart* w8 P, N) U$ U$ X7 h6 A4 }7 ?
no sysopt connection permit-ipsec2 [* c& V# d7 o1 G0 _
telnet 0.0.0.0 0.0.0.0 inside! o* z8 b$ P- d' [) f8 j) ?
telnet timeout 5) ]9 N7 Q1 d. S
ssh 0.0.0.0 0.0.0.0 outside
  z/ M) v, \- issh timeout 5
" y0 f' @" A. yssh version 1, L7 ^1 `2 o8 c0 D( q; C' g4 b. G
console timeout 0
9 A! ^$ O9 X7 Q% `; S! D- z!
2 y* A. o9 i, K  x+ sclass-map inspection_default
$ S, h* F: \0 o2 }& H1 A# h match default-inspection-traffic
& }& p  i# S/ S. i. a: z!
+ e; [# W! U- y4 o. ^6 D: e!
2 B5 b! C' V- e9 Zpolicy-map global_policy
( Y+ ^% l( M/ V5 T  U, Q class inspection_default; t! r6 d' e* o9 I4 s6 |# A1 V( J
inspect dns maximum-length 512 4 S6 H$ M' @8 L! V/ j+ i+ _! E
inspect ftp
' G% i3 \% s2 U3 _0 S" R+ d inspect h323 h225
, u, g) U3 b* `/ j8 _) d inspect h323 ras $ z. P$ b5 ?# D6 p
inspect http
! l" J; k0 C. U9 J) X  C inspect netbios
9 T9 x/ z% @  F2 u inspect rsh ' i$ v5 I  ~4 m+ f5 [+ [4 _
inspect rtsp 4 J. }) Q- t3 r7 X7 O) |- S
inspect esmtp
' o# z3 a" K0 d4 D) h: N+ J inspect sqlnet / @: s8 K% z8 b
inspect sunrpc 3 c: f& K6 s2 @. c* T! |! r* S
inspect tftp
% f& G7 i& x; g: B0 l! K inspect sip 8 V: y* L4 d, n
inspect xdmcp
9 n0 Q6 |$ O6 z9 C4 r!
/ Y; B3 D: t6 lservice-policy global_policy global
5 w; T4 c9 k7 H: ICryptochecksum:66f1f574614fca8d066889333922c8f9; R5 k- T- y9 [, E8 ]
: end* r( S* n4 z4 q: A
, u* R( l0 H# q) g4 k, j9 K! G

; W* O( u: k, I======================================================
: o& P+ @- T" D升级过程的提示如下,已省略重复的输出
9 Y1 T5 n& O; ~monitor> tftp4 n  o/ E9 T0 n# a) ]( H, u
tftp pix704.bin@192.168.4.100............................................................................................................................................................................................................................................................................................................................................................................................
% `& i' d( I) O  _1 hReceived 5437440 bytes$ y( W( \, r% W0 G2 \2 m; Q/ z
1 S% g+ ^: f9 s( I' ~7 Y
Cisco PIX Security Appliance admin loader (3.0) #0: Thu Oct 13 21:07:02 PDT 2005
( \7 M# B& h: T9 F& P########################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################
( y6 z" s; P1 w8 D) J' j96MB RAM
" ?% x. X9 E4 ?
$ c; K" i( X0 U0 r8 A0 G. U& mTotal NICs found: 2
' v$ a+ d3 T3 @! X. l6 {  u% d( _mcwa i82559 Ethernet at irq 11 MAC: 000f.9001.5199
: ?0 c; i1 }. H/ K; J: q8 s9 t& mmcwa i82559 Ethernet at irq 10 MAC: 000f.9001.5198
3 Z  N. E! {# z; T9 hBIOS Flash=am29f400b @ 0xd80002 L/ A2 j: s# ]  O) U, n! s
Old file system detected. Attempting to save data in flash5 t: u+ x1 o2 C4 F# i; ^$ @
) C' O* B4 @, X. L" N7 {( d

4 N8 @1 j: T& A& F: \Initializing flashfs...2 N* k$ i8 B  _) {; a* e# w/ a
flashfs[7]: Checking block 0...block number was (-2131)0 l. X! W6 I$ S8 P5 n
flashfs[7]: erasing block 0...done.
) c1 C8 M% w1 _# Eflashfs[7]: Checking block 1...block number was (-12656)% m+ e, d$ z7 K" T) [8 x; t0 d

8 K% p  i; b" I$ W' G' @/ Uflashfs[7]: erasing block 122...done.
6 e$ f/ o6 n: Hflashfs[7]: Checking block 123...block number was (-13108)+ h4 _6 h2 Z# j" O  R% X3 i! [  g
flashfs[7]: erasing block 123...done.6 w. O* ^0 V* {% N
flashfs[7]: Checking block 124...block number was (-13108)9 u( i8 E, y6 s0 S! C
flashfs[7]: erasing block 124...done.$ B& E2 \4 o2 K: B
flashfs[7]: Checking block 125...block number was (0)) E1 H% `$ P3 O# s/ A3 Z% {; V/ Q
flashfs[7]: erasing block 125...done.
- E  j- a( M2 i2 ^flashfs[7]: 0 files, 1 directories0 f2 e- W5 J$ j# @
flashfs[7]: 0 orphaned files, 0 orphaned directories
% E) c5 W0 }7 n( K- Y. kflashfs[7]: Total bytes: 16128000: `8 M7 f# m$ x# W+ U
flashfs[7]: Bytes used: 1024. A  g; Y# ?+ j/ I( H6 Y' C
flashfs[7]: Bytes available: 161269764 w0 O9 t) R) w1 F5 z
flashfs[7]: flashfs fsck took 159 seconds.
. d8 }# H4 ?2 N: lflashfs[7]: Initialization complete." }2 `  z1 z# @; w6 V% R

% o2 G- n5 i9 A0 NSaving the datafile
$ c6 G- s  n1 _2 a. h7 ^!5 U+ {6 A# @% Y- }1 g
Saving a copy of old datafile for downgrade8 n: h" Y$ {) a( j
!9 \7 V# y+ s, P: g9 }4 E
Saving the configuration
" w/ z! Z$ m$ J* T!( B  }) K6 h/ {$ ^' ~: q8 c* i, H9 r
Saving a copy of old configuration as downgrade.cfg# l! D" a' t* Q# s2 v- w0 Q
!& Z9 J! i2 I1 S- {. q& u1 B
Saved the activation key from the flash image
5 S: k5 N' Z/ M4 jSaved the default firewall mode (single) to flash; E/ x' M9 `- _1 k
The version of image file in flash is not bootable in the current version of
( w: K+ S; O) a' K* Zsoftware.
  O( U6 c6 P! Y" Q# L: _Use the downgrade command first to boot older version of software.& ^% M3 {* ~0 ^0 ~; R! Z3 x
The file is being saved as image_old.bin anyway.
) E0 @! Z8 ^% Z. `& f!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
8 d. I. d; q2 o* S& b# kUpgrade process complete; n3 g! D. Q& d+ I& J
Need to burn loader....
4 y; e& Y  i+ z) f" P5 k- Z& TErasing sector 0...[OK]  g. V" h5 R& x) Y
Burning sector 0...[OK]6 m, B* H1 p  L, ?! y0 k

: g* m: D3 E3 h( M4 D7 x' YLicensed features for this platform:9 {( g2 ]7 U" e1 T3 i, H
Maximum Physical Interfaces : 3
$ W6 `' L9 d1 V. \: P- ~7 e, x3 K  {Maximum VLANs : 10
) p, S: [& a6 q) gInside Hosts : Unlimited 3 f1 S  a: P* [6 \1 C! H  ?
Failover : Disabled
  y1 ~2 W! M) Y# }VPN-DES : Enabled ! a# p) t" G: i3 b" b
VPN-3DES-AES : Disabled
* |4 N- w, V) |" f: YCut-through Proxy : Enabled
. Y* q" x# }' c  U/ N2 rGuards : Enabled ; H" M. L, E. e% D6 k! J% l
URL Filtering : Enabled ( H8 ?9 i  p& [: o/ W- j9 [
Security Contexts : 0 / a8 e$ A  v4 q; E& P5 Y* O$ e, ?2 V
GTP/GPRS : Disabled . @$ K/ E- q( H) o
VPN Peers : Unlimited
( P' G' f% C) j, x% U
8 q: e: J4 [6 q1 _This platform has a Restricted (R) license.
; a' v1 h4 _% E/ f3 B, e  m' p. c, m! R0 h
--------------------------------------------------------------------------7 L3 c3 G) j  g" ^7 B3 t
. .
! [( o6 h# D: L8 f' \$ m: u0 G | | $ |6 N  p4 z9 `& N
||| |||
- F& L4 }* [0 c1 ]2 b/ Y .|| ||. .|| ||.
9 [9 U5 P2 I; R5 \ .:||| | |||:..:||| | |||:. ' q1 P1 c$ y5 e" k1 q, {3 m2 K% a
C i s c o S y s t e m s 2 }# a/ N: p! h
--------------------------------------------------------------------------* V! u8 S2 y0 L2 N+ _5 m( f
  _/ e: @+ O# a0 m, _! K; \
Cisco PIX Security Appliance Software Version 7.0(4) # m0 n* C1 b5 c- n, A

* ~! r" o2 w+ x! G1 n5 ~ ****************************** Warning *******************************0 q9 j! g6 n8 f0 V
This product contains cryptographic features and is8 z% i% B# N6 t6 T9 T) E
subject to United States and local country laws8 l) A$ T+ Q7 h2 z' k4 D
governing, import, export, transfer, and use.
7 ]: U+ E9 S% E# ` Delivery of Cisco cryptographic products does not' V2 ]" ?! S4 f
imply third-party authority to import, export,# Q  A6 A% l0 U; R* T& i4 D* a
distribute, or use encryption. Importers, exporters,, {2 u' B/ I7 n/ C- ^
distributors and users are responsible for compliance; i$ M+ U8 {! F2 y
with U.S. and local country laws. By using this
4 t4 v) l* h5 F! t6 L product you agree to comply with applicable laws and
; p( I+ k; Q7 v+ @* Q regulations. If you are unable to comply with U.S.0 U9 ?9 D0 f1 {0 Z0 R2 D1 b( s
and local laws, return the enclosed items immediately." R7 [$ t/ p) X# B6 b5 l/ H0 Z

/ q: @3 C/ R& W A summary of U.S. laws governing Cisco cryptographic, f9 w% [- j4 c% x( q
products may be found at:# P/ H. u. N1 D4 t# ]
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html6 M, \2 t7 ?/ O. b" s

4 {" ?7 |$ ?" U8 N If you require further assistance please contact us by
/ r, u5 B$ {$ S3 A9 n2 [ sending email to export@cisco.com.9 d4 V2 S& ]8 [
******************************* Warning *******************************7 A& ]3 V' n4 ~) P9 H5 M

7 J9 X" }2 c% L& r4 d7 S3 dCopyright (c) 1996-2005 by Cisco Systems, Inc.7 C; ^( z/ `1 s/ Q6 e0 L
0 F; y+ D" z8 o3 ~' P* V# M9 i
Restricted Rights Legend
% |1 r7 P5 U1 M. H& r3 n- ?
( H/ b, E3 a8 E& `! n4 iUse, duplication, or disclosure by the Government is
$ w2 N+ p" w' }/ g1 c( b+ rsubject to restrictions as set forth in subparagraph
8 n2 ^" H7 l  L1 S, G' l& s+ ]! A! `(c) of the Commercial Computer Software - Restricted
5 |6 E( \" L$ s. Q0 Q3 eRights clause at FAR sec. 52.227-19 and subparagraph
3 [' S9 \5 ]& r% t(c) (1) (ii) of the Rights in Technical Data and Computer
. T- M$ V, `# E' i9 s; D4 e+ kSoftware clause at DFARS sec. 252.227-7013.  [$ S* ?* v: N5 y  }2 A% J
  V' ^+ f0 L# R1 t6 a  C6 f1 Z
Cisco Systems, Inc.
: I" c. ]7 C, T/ y 170 West Tasman Drive
; j4 n2 E  K# P( @ San Jose, California 95134-1706
/ W( |; ?+ `. B" x
, d( i. ]( \7 H( ~0 ^# \/ vERROR: The conduit command has been deprecated, and as such,
: C; r) D" r% d) d" w% ^" H it has been superseded by the 'access-list' command.
, p- ]/ S# n) x' H*** Output from config line 44, "conduit permit tcp any a..."
( B; U9 ?1 D; \- J# B4 AERROR: The conduit command has been deprecated, and as such,3 U" ?& @8 m7 Q$ C/ M
it has been superseded by the 'access-list' command.4 G/ T- [. _" f  _3 s# N2 J
*** Output from config line 45, "conduit permit udp any a..."
1 k9 E8 p4 U% m2 l, v; I5 tERROR: The conduit command has been deprecated, and as such,8 Q9 M  {- c; c4 V& O: r, R
it has been superseded by the 'access-list' command.
0 I3 L0 P, g7 W0 C*** Output from config line 46, "conduit permit icmp any ..."
: Y2 `, J7 [) ?2 M' t- nERROR: The conduit command has been deprecated, and as such,: a8 K0 ^8 z; D0 u+ o& b
it has been superseded by the 'access-list' command.. I, r: e  M; I( }1 c- f' j
*** Output from config line 47, "conduit permit ip any an..."
' u/ a0 m' f  l$ O* w- vERROR: This command is no longer needed. The LOCAL user database is always enabled.
  \% |* q7 `% n. u( ?% c/ d7 r *** Output from config line 55, "aaa-server LOCAL protoco..."
6 M1 ^; S$ p" j. H.ERROR: This command is no longer needed. The 'floodguard' feature is always enabled.9 G: k. k8 G' T7 F0 ~% C: Y
*** Output from config line 62, "floodguard enable"3 t, h& C% J4 T) \* j- V

! _, N! G+ C/ @1 hCryptochecksum (unchanged): b6e5e8d8 33cf20a5 bee5bda0 281dd82f 0 S0 e3 o5 x, i! J
INFO: converting 'fixup protocol dns maximum-length 512' to MPF commands
6 d! Q  E5 @  B, b& ^2 QINFO: converting 'fixup protocol ftp 21' to MPF commands
* |3 u. m& p1 S4 WINFO: converting 'fixup protocol h323_h225 1720' to MPF commands+ J1 t. s* n7 _
INFO: converting 'fixup protocol h323_ras 1718-1719' to MPF commands
: f2 p: [# a$ {+ v) XINFO: converting 'fixup protocol http 80' to MPF commands
( e; ^, A% a9 y7 g) H0 \INFO: converting 'fixup protocol netbios 137-138' to MPF commands1 g# `. C6 t9 l* a
INFO: converting 'fixup protocol rsh 514' to MPF commands
" r' V. X' F" w; YINFO: converting 'fixup protocol rtsp 554' to MPF commands
# R5 N1 G. R; oINFO: converting 'fixup protocol sip 5060' to MPF commands
) g3 ^& P4 x; g! qINFO: converting 'fixup protocol smtp 25' to MPF commands
1 A4 E  b( j) B0 m1 DINFO: converting 'fixup protocol sqlnet 1521' to MPF commands; o4 Y% m/ m" G# N8 b
INFO: converting 'fixup protocol sunrpc_udp 111' to MPF commands& |: O( G% q5 j
INFO: converting 'fixup protocol tftp 69' to MPF commands" {1 F& ~0 l4 Y" T4 V
INFO: converting 'fixup protocol sip udp 5060' to MPF commands, f, a: F' e7 H# J7 v( W
INFO: converting 'fixup protocol xdmcp 177' to MPF commands
( R9 L; u8 E6 R& b5 b. N' ~ ************************************************************************- |1 U5 a9 g$ D9 ?
** **2 j1 m  R% A8 |. m# \
** *** WARNING *** WARNING *** WARNING *** WARNING *** WARNING *** **- n! _- c; |* Q6 ^
** **
+ `1 \, C, E& {/ i8 M ** ----> Current image running from RAM only!
CCNA考试 官方正规报名 仅需1500元
回复 论坛版权

使用道具 举报

我很棒 [Lv4 初露锋芒] 发表于 2013-1-30 08:11:37 | 显示全部楼层
几个问题了,包括命令集的更改,把老配置文件删掉重新写吧
回复 支持 反对

使用道具 举报

jcwangbin [Lv4 初露锋芒] 发表于 2013-1-30 12:55:11 | 显示全部楼层
先谢谢楼上的,可以告诉是哪个命令吗?
8 C  a& H  c& W% a/ U是这块提示的命令吗?
" C4 l( ]0 [; z2 iERROR: The conduit command has been deprecated, and as such,8 ?: Q0 l1 `. f% g7 Q& e
it has been superseded by the 'access-list' command.5 N' E1 \6 s: M$ \% c7 S
*** Output from config line 44, "conduit permit tcp any a..."
5 O; p6 I. [- jERROR: The conduit command has been deprecated, and as such,8 {: o4 U; G$ P. T3 N. G
it has been superseded by the 'access-list' command.
# `; N% \9 E# ~2 B' m*** Output from config line 45, "conduit permit udp any a..."# u4 z& U4 \6 c8 L
ERROR: The conduit command has been deprecated, and as such,
/ K  I! H# v% X4 C+ W4 i" oit has been superseded by the 'access-list' command.
& k6 T, p8 |: m$ G  k. p*** Output from config line 46, "conduit permit icmp any ..."! E' s& u3 h! p# C2 {6 ]# b
ERROR: The conduit command has been deprecated, and as such,
( o& x8 Q) e7 P# C0 \6 @/ Mit has been superseded by the 'access-list' command.
1 M* z9 ~* ^/ v$ Q/ _0 n3 K*** Output from config line 47, "conduit permit ip any an..."
% W4 J) D9 x2 U. U, m1 }; aERROR: This command is no longer needed. The LOCAL user database is always enabled.
8 s) ~+ M! l1 G. ~' x/ C, V*** Output from config line 55, "aaa-server LOCAL protoco..."
( m. S$ j; ~9 _.ERROR: This command is no longer needed. The 'floodguard' feature is always enabled.: H9 @2 P1 a3 i$ s9 k
*** Output from config line 62, "floodguard enable"
回复 支持 反对

使用道具 举报

haha3344 [Lv4 初露锋芒] 发表于 2013-1-30 14:40:33 | 显示全部楼层
你的PIX没有 Failover的授权,所以failover相关的命令就做不了。
, j# P3 o& T) s! k8 D$ x7 f  C
- R' H6 N- L' jconduit命令7.0上已经不用了。 改用 access-list了。
2 i. Q, ]. B9 y0 r, V. }另外有些命令是默认就开启了的。不用配置了。
回复 支持 反对

使用道具 举报

邪魂 [Lv5 不断成长] 发表于 2013-1-30 16:07:04 | 显示全部楼层
R版的不能做failover
回复 支持 反对

使用道具 举报

fabric [Lv4 初露锋芒] 发表于 2013-1-30 21:10:16 | 显示全部楼层
如果你需要支持failover的OS 可以与我联系 我可以有尝提供
回复 支持 反对

使用道具 举报

newolf [Lv5 不断成长] 发表于 2013-1-30 21:12:43 | 显示全部楼层
能不能做failover不是由os决定的,想骗钱也不是这么个骗法
回复 支持 反对

使用道具 举报

suini [Lv4 初露锋芒] 发表于 2013-1-30 21:40:33 | 显示全部楼层
几天没有上网,今天才来。谢谢大家的帮助!!!
回复 支持 反对

使用道具 举报

luming [Lv4 初露锋芒] 发表于 2013-1-31 00:11:43 | 显示全部楼层
还有个问题?可以降级到6.3吗?大概步骤是什么?再次谢谢各位!!!
回复 支持 反对

使用道具 举报

jamkane [Lv4 初露锋芒] 发表于 2013-1-31 01:05:05 | 显示全部楼层
downgrade
回复 支持 反对

使用道具 举报

您需要登录后才可以回帖 登录 | 立即注册

本版积分规则

QQ|无图浏览|手机版|网站地图|攻城狮论坛

GMT+8, 2026-10-15 12:16 , Processed in 0.113170 second(s), 14 queries , Gzip On, MemCache On.

Powered by Discuz! X3.4 © 2001-2013 Comsenz Inc.

Designed by ARTERY.cn