PIX ver 7.01

Requirement: 64RAM

pixfirewall(config)# sh ver

Cisco PIX Firewall Version 6.3(5)

Compiled on Thu 04-Aug-05 21:40 by morlee

pixfirewall up 5 mins 45 secs

Hardware: PIX-506E, 64 MB RAM, CPU Pentium II 300 MHz
Flash E28F640J3 @ 0×300, 8MB

Notice the 64MB of RAM. This is important if you want to continue.

Next, I downloaded the pdm-304.bin file from Cisco’s website and renamed it to fakepdm.bin.

I started up the TFTP server and ran ‘copy tftp flashdm’ on the PIX.

pixfirewall(config)# copy tftp flashdm
Address or name of remote host [0.0.0.0]? 192.168.1.35
Source file name [cdisk]? fakepdm.bin
copying tftp://192.168.1.35/fakepdm.bin to flashdm
[yes|no|again]? yes
Erasing current PDM file
Writing new PDM file
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!tftp: Timed out during transfer
Erasing partial PDM file
PDM file not installed.
pixfirewall(config)#

After this message appears “Erasing current PDM file”, unplug the ethernet cable from the PIX. As you can see by my output above, the writing new PDM portion times out. Then you will see that the PIX is ‘Erasing partial PDM file’ and ‘PDM file not installed’.

You’ve basically cleared enough space in flash memory to run any upgrade.

I’ve decided to upgrade to version 7.01 only. It’s your choice if you want to go higher. I’m only doing this to prove that it CAN be done.

Next, I ran the upgrade as normal by issuing ‘copy tftp flash:image’ and used the pix701.bin file.

pixfirewall(config)# copy tftp flash:image
Address or name of remote host [0.0.0.0]? 192.168.1.35
Source file name [cdisk]? pix701.bin
copying tftp://192.168.1.35/pix701.bin to flash:image
[yes|no|again]? yes
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!Received 5124096 bytes
Erasing current image
Writing 5066808 bytes of image
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!Image installed
pixfirewall(config)#

Once you reload the PIX, you will see several messages. Do not abort the reload/reboot sequence. It’s normal what you are about to see. The 7.x code is what’s causing the following output to appear that way. Just sit back and wait for the prompt.

pixfirewall(config)# reload
Proceed with reload? [confirm]