Recovering the ASAPIX to Version 7

Recovering the ASA/PIX to Version 7

The following tasks have been completed:

• Your PC has the ASA/PIX and ASDM software.

• TFTP is running on your PC.

• Your PC is connected physically to the security appliance.

• The ASA/PIX Security Appliance is configured to access the PC's TFTP server.

You are ready to start the download procedure. A word of caution: Some steps have been highlighted for you that are critical in this process. If these steps are not followed, you might need to restart the download process from the beginning:

Step 1.	Enter the following command to start the download procedure: monitor> tftp……….. The dots indicate the download is in process. You can also check the log on your TFTP server to ensure that data is being transferred.
Step 2.	At this point, the ASA/PIX Security Appliance should boot automatically. You will see the ASA/PIX prompt come up on your screen. Enter the command show version to verify that version 7.0.x is installed. You should see a line on the show version that indicates that 7.0.x is on your machine: PIX (7.0) #0: Wed Aug 11 01:28:06 MDT 2004 Hardware: PIX-515E, 64 MB RAM, CPU Pentium II 431 MHz Flash E28F128J3 @ 0xfff00000, 16MB BIOS Flash unknown @ 0x0, 0KB 0: Ext: Ethernet0 : media index 0: irq 10 1: Ext: Ethernet1 : media index 1: irq 11 License Features for this Platform: Maximum Physical Interfaces : 6 Maximum VLANs : 25 Inside Hosts : Unlimited Failover : Enabled VPN-DES : Enabled VPN-3DES-AES : Enabled Failover standby only : Disabled Cut-through Proxy : Enabled
Step 3.	As a final step, you must update your boot command to point at your new ASA/PIX version 7 image and then save the configuration to memory. Enter the following series of commands: pixfirewall# conf t pixfirewall(config)# boot system flash:/pix70.bin pixfirewall(config)# wr mem

At this point, your ASA/PIX Security Appliance should be fully operational.

If your configuration is lost, you might need to paste or restore it from backup. If you do need to paste the configuration, you must first remove the enable password and then reset it after you restore the configuration. Because the password is encrypted when it is cut and pasted, if you don't remove the password line before pasting, your new password will be an impossible-to-remember hash.