Cisco help needed

Printable View

09-17-2008, 11:10 AM
TurboDuane

Cisco help needed

I've got a Cisco 515e PIX firewall that is in need of service, here at the county. Cisco wants me to buy a service agreement, can these things be serviced w/o buying an agreement?

The problem it's having is that it's dropping DNS traffic causing pages to come up slowly. It has experienced complete DNS failure twice in the last few months. The problem is resolved with a re-boot, but the re-boot takes a full 30 minutes, so I'm thinking the IOS is corrupted. I don't have a copy of the IOS, so I'm thinking I need a Cisco Engineer to service the firewall.

Particulars on firewall are:
Cisco PIX Security Appliance Software Version 7.0(4)
Compiled on Thu 13-Oct-05 21:43 by builders
System image file is "flash:/image.bin"
Config file at boot was "startu
xxx up 2 hours 24 mins
Hardware: PIX-515E, 64 MB RAM, CPU Pentium II 433 MHz
Flash E28F128J3 @ 0xfff00000, 16MB
BIOS Flash AM29F400B @ 0xfffd8000, 32KB

TD
09-17-2008, 11:37 AM
sammm

Sounds like a job for channelmaniac.
09-17-2008, 12:57 PM
Titus

Quote:

Originally Posted by sammm

Sounds like a job for channelmaniac.

+1
09-17-2008, 01:08 PM
Ataim

1 Attachment(s)

Its all Greek to me.
09-17-2008, 03:18 PM
ken o

Using Dynamic or Static NAT/PAT?

Using a dynamic NAT, how many addresses do you have in the pool and how many clients using that pool? I have seen it where you have 50 addresses in the NAT pool and when the 51st client tries to get a NAT there is a sluggish effect. The solution is to go to PAT.

There is a pix708.bin that was released 2 Jun 2008. A little newer. There is also a pix802.bin that requires a minimum of 16MB flash and 64 MB Ram.

Does the log show any errors, do a show log.
09-17-2008, 04:37 PM
channelmaniac

Wow. That's old code.

The problem is, Cisco doesn't hand out code without a service contract. Maintenace covers hardware problems, software upgrades, and access to TAC for help in getting things fixed. I'm an employee so I *cannot* just hand you the code.

There is an off chance that you might be able to find a security bulletin that would allow you to get a free upgrade. It'll require some research on your part.

http://www.cisco.com/en/US/products/...s_listing.html

Raymond