pix 515E 防火牆 IOS及SDM更新日誌

今天更新了PIX515E防火牆的IOS和SDM管理軟件，其實很簡單
首先，獲得適合本身防火牆型號的IOS和SDM，這裏cisco在3.0版本的PDM後將管理軟件升級到了
ASDM5.0，有比較大的提升。
找到之後在本機架好tftp服務器，能夠用cisco的，也能夠用別的，我用winagents的，感受比較舒服。
而後進入pix的終端。
pixfirewall# copy tftp flash
Address or name of remote host [0.0.0.0]? 10.0.0.100
Source file name [cdisk]? pix701.bin
copying t [url]ftp://10.0.0.100/pix701.bin[/url] to flash:p_w_picpath
[yes|no|again]? yes
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Received 5124096 bytes
Erasing current p_w_picpath
Writing 5066808 bytes of p_w_picpath
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Image installed
pixfirewall#
pixfirewall#
pixfirewall#
pixfirewall#
pixfirewall# reload
Proceed with reload? [confirm]
重啓之後IOS就更新爲7.0的了～簡單吧？注意，重啓的過程當中pix會從新裝載flashfs：
Initializing flashfs...
flashfs[7]: Checking block 0...block number was (2423)
flashfs[7]: erasing block 0...done.
flashfs[7]: Checking block 1...block number was (24879)
flashfs[7]: erasing block 1...done.
flashfs[7]: Checking block 2...block number was (-16063)
flashfs[7]: erasing block 2...done.
flashfs[7]: Checking block 3...block number was (21670)
……………………………………
比較久，耐心等待，並且不要斷電，不然，哼哼
完成時pix還會把之前的config最爲downgrade－config保存。
接下來更新ASDM軟件：
pixfirewall# copy tftp flash

Address or name of remote host []? 10.0.0.100

Source filename []? asdm-501.bin

Destination filename [asdm-501.bin]?

Accessing t [url]ftp://10.0.0.100/asdm-501.bin[/url]...!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Writing file flash:/asdm-501.bin...
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
5919340 bytes copied in 85.620 secs (69639 bytes/sec)
pixfirewall# dir

Directory of flash:/

4 -rw- 2809 23:32:19 Aug 14 2006 downgrade.cfg
7 -rw- 5103672 23:33:18 Aug 14 2006 p_w_picpath.bin
11 -rw- 5919340 23:36:47 Aug 14 2006 asdm-501.bin

16128000 bytes total (5094400 bytes free)
pixfirewall# reload
Proceed with reload? [confirm]
這樣就能夠了，不涉及到IOS更新的重啓比較快。
立刻就行了。
而後用https鏈接pix，會有一個提示，問你將ASDM下載安裝仍是直接在java環境裏面起。
其實若是常常管理的仍是下載安裝了好，反正也不大。
到此就完成了，若是還有疑問能夠訪問cisco網站的：
[url]http://www.cisco.com/en/US/products/hw/***devc/ps2030/products_tech_note09186a00804708d8.shtml#t5[/url]