September 9, 2010

You are here: Home / Home Lab

Configuring ASDM on Cisco PIX 515

June 6, 2010 By mike View Comments

Not being a day to day Cisco guy I thought I’d throw this up on my blog, mostly for my future reference.  I currently am running PIX OS 7.0(1) and wanted to run ASDM to make configuring my client VPN access easier.

The steps for installing ASDM are pretty easy:

PRD-FW1# copy tftp flash

Enter your tftp server and asdm file name

PRD-FW1(config)# asdm image flash/asdm-524.bin

PRD-FW1(config)# wr mem

Then to allow the http access:

PRD-FW1(config)# http server enable

PRD-FW1(config)# http 0 0 inside

I initially installed ASDM version 5.24, it copied to flash fine but when I tried to run the following command it gave me an error:

PRD-FW1(config)# asdm image flash:asdm-524.bin

It returned an error saying “Device Manager image set, but not a valid image file flash:asdm-524.bin” If I ran a show run it did show the asdm image, and I did get the webpage to sucessfully load when accessing it from internally but nothing would happen.  My next step was to take the MS approach to troubleshooting and try a reload before pulling my hair out but that didn’t solve anything.

At this point I thought maybe I had an issue with the asdm-524.bin file and I decided to try asdm-512.bin which gave me the same exact problem.  After some searching I realized the ASDM version is apparently tied to the PIX OS version and I needed to use a version like asdm-502.bin

Now I was able to sucessfully run the “asdm image flash:asdm-502.bin” command, but my next problem was that the ASDM Launcher wouldn’t do anything after I logged in and the webpage would just sit at a screen that said “Do not close this window”.

To fix that I found I needed to have a much older version of Java, I needed version 6 update 7 x86 version After I only had that version on my laptop I was able to connect to ASDM successfully.

Popularity: 17% [?]

Filed Under: Home Lab, Networking, Uncategorized Tagged With: cisco, Home Lab, pix 515

Configuring PIX 515 with Comcast

May 15, 2010 By mike View Comments

In my last blog post I was updating my PIX 515 software to a more recent version. My next step was to get it working on Comcast.

c515-1> enable
c515-1# conf t
Configure e0 (outside interface) to get DHCP address from Comcast
c515-1(config)# int e0
c515-1(config-if)# ip address dhcp setroute
c515-1(config-if)# no shut
Configure e1 (inside interface) as 10.0.10.1
c515-1(config-if)# int e1
c515-1(config-if)# ip address  10.0.10.1 255.255.255.0
Configure NAT (Perform NAT on all addresses in the 10.0.10.x subnet)
c515-1(config)# nat (inside) 1 10.0.10.0 255.255.255.0
Configure Global Address
c515-1(config)# global (outside) 1 interface

I still have a(n extremely) basic config, e0 is the interface connected to my cable modem which is receiving it’s IP address via DHCP from Comcast. My internal interface is e1 which is statically set to 10.0.10.1. Next I need to get DHCP configured on the 515, put my current wireless solution (Apple Airport Extreme) into bridge mode and eventually have it be replaced by a Cisco AP. I’ll also be adding different vlans into my network for separating some things out but for now I wanted to make blog posts on the individual steps.

Popularity: 7% [?]

Filed Under: Home Lab, Networking

Cisco PIX 515 for Home Lab

May 8, 2010 By mike View Comments

Installing a 3des License

3des license is now available for free from Cisco, and since my PIX didn’t have a 3des license I headed over to this link to get it for free.

Upgrading IOS to Latest Version

Memory Upgrade

Since I have a PIX 515 (not a 515e) I needed to upgrade the flash from monitor mode.  The current version on it was 6.3 and I wanted it to be at least v7 as I wanted to be able to use it as a transparent firewall.

The first step was to upgrade the memory as the 515 only had 32mb, so I added a PIX-515-MEM-32 to get to 64mb DRAM

IOS Upgrade

pix515# write net <tftp server ip>:pixconfig

Now reload the PIX and send a break to enter monitor mode

monitor> interface 1
monitor> address <ip address>
monitor> server <tftp server address>
monitor> file pix704.bin
monitor> tftp

Once the new PIX image is booted, run the following:

pix515> enable
pix515# copy tftp flash

After that I did the same exact process to get to version 8.0(4)

Popularity: 4% [?]

Filed Under: Home Lab, Networking Tagged With: cisco, Home Lab, pix 515