
本方法只是真对没有floppy的PIX,采用TFTP进行文件传输。/ P/ x/ l+ G5 R7 Y/ L
: |+ f/ e! a4 |8 s X* ?, U3 _1、准备:
" y" g/ Q& x8 v7 `" |8 p [
# U! l% h k3 I( O 1)PC一台,其上安装TFTP服务器
+ P! k T+ V( q$ a
$ ?" S9 v3 E* w) N# |6 @4 s7 V( J 2)交叉线一条,连接PIX以太网口和PC网卡9 W! r( H+ s( O q1 U! [; l3 a. h
* }, N$ Q, R( B2 z; b/ r
3)下载密码恢复软件(根据PIXOS的版本选择不同的恢复软件),放到TFTP服务器的目录下,7 c6 Z7 o7 J# P3 J' l
, P3 {2 B' o' [( H
2、网络拓扑示意图2 G% A+ F$ \, m2 |/ j/ B
3 j+ P1 b% h; Z8 L# p1 R6 Z
* B$ _, ?6 e0 q$ g% C2 T3 ]% K# O+ i6 b0 ^$ P
3、详细恢复过程:
- ^8 ]0 O# U# R* r$ `5 T2 d: `! Z# h8 b
# W; c' R. V7 @6 f5 m启动PIX,ctrl+breack,进入到monitor>模式下,执行下面的操作:
, ?3 f4 F6 X. n3 a; ^, c* E( R, O# x9 x2 { U8 z) |
monitor> interface 0 0: i8255X @ PCI(bus:0 dev:13 irq:10) 1: i8255X @ PCI(bus:0 dev:14 irq:7 ) Using 0: i82559 @ PCI(bus:0 dev:13 irq:10), MAC:
, k! j; l) j; O/ [9 U- V: o) _ u+ B w+ @% F3 ?7 D
0050.54ff.82b9 monitor> address 192.168.18.111 address 192.168.18.111 monitor> server 192.168.18.254 server 192.168.18.111 monitor> file np63.bin file 2 |- H8 M& J9 p7 b2 H+ Z# }9 G
& I: p5 x! b1 V! ~9 v& C8 f
np63.bin monitor> gateway 192.168.18.254 gateway 192.168.18.254 monitor> ping 192.168.18.254 Sending 5, 100-byte 0xf8d3 ICMP Echoes to 192.168.18.254, ( g6 B2 v7 n/ }( V
$ `" A: e1 O& y# u5 M4 Y
timeout is 4 seconds: !!!!! Success rate is 100 percent (5/5) monitor> tftp tftp np63.bin@192.168.18.254 via 6 g- E* g- u E1 A1 z* g
: ?, d4 o2 O) o- ?) Y
192.168.18.254................................... Received 92160 bytes Cisco Secure PIX Firewall password tool (3.0) #0: Tue Aug 22 23:22:19 PDT 2000
3 w; o8 E' i# @8 N8 R( x; d5 U4 n, X$ a- B: ]! ^0 s
Flash=i28F640J5 @ 0x300 BIOS Flash=AT29C257 @ 0xd8000 Do you wish to erase the passwords? [yn] y Passwords have been erased. Rebooting....重新启动后就可以了+ ^- u( O# s. y6 F
1 G# D% `8 D" S1 h7 ]+ o4 }
!! }: o& T9 D$ B- O O6 W
$ k5 j: Z2 C* K# f! h
3 Q/ _' T: C% y$ [% }+ H9 {4、相关软件:根据PIX的不同OS版本进行选择。np50 np51 np52 np53 np60 np61 np62 np63 np70
/ L. A( H6 K% J0 x3 `2 G8 A* |- l3 K3 g y
" T7 S2 o+ n5 ]# x
2 b1 B, J7 W$ x8 F$ u7 q
|
|