networking-forum.com - View topic - PIX 515

Board index » Cisco Networking » Cisco Security

All times are UTC - 6 hours [ DST ]

PIX 515 - gimme the short and sweet

Page 1 of 1

[ 12 posts ]

Print view

Previous topic | Next topic

Author

Message

sysctl

Post subject: PIX 515 - gimme the short and sweet

Posted: Wed Aug 04, 2010 10:17 am

Senior Member

Joined: Thu Apr 01, 2010 10:01 pm
Posts: 407
Location: North Carolina
Certs: CCNA

I got a PIX 515 (not 515e) off of ebay yesterday for fairly cheap ($30). I have a grand total of zero experience with a PIX or an ASA. But, just glancing at the PIX wikipedia page, it seems to me the main difference in the two versions is 1) processor speed 2) amount of RAM. It shows that they can both run the latest version of the PIX software, and both have two fixed fa interfaces. The speed doesn't bother me, since I'll only be using it at home to learn it. Any secret tips/tricks I should know about, other than to go buy a PIX book?

Thank you kind sirs in advance.

_________________
A flute with no holes is not a flute. And, a doughnut with no hole is a Danish.

Top

kerpap

Post subject: Re: PIX 515 - gimme the short and sweet

Posted: Wed Aug 04, 2010 7:56 pm

Ultimate Member

Joined: Sun Jan 04, 2009 6:28 pm
Posts: 715
Location: Singapore
Certs: CCNA, CCDA, CCNA-SECURITY

I would say the short and sweet, get a book. you should also have a basic understanding of how these devices work and of network security (Protocols, practices etc.) a PIX can be pretty much useless if configured incorrectly

P.S. check if it has a VAC in it and if 3DES is installed. this is a bonus for the learning end. you can play around with secure VPN

_________________
CCNA, CCDA, CCNA-SECURITY

Top

Vito_Corleone

Post subject: Re: PIX 515 - gimme the short and sweet

Posted: Wed Aug 04, 2010 7:58 pm

Moderator

Joined: Mon Apr 07, 2008 10:38 am
Posts: 9436
Location: Orlando, FL
Certs: CCNP RS, CCNP DC, CCDP, CCIP

It's old.

_________________
http://blog.alwaysthenetwork.com

Top

sysctl

Post subject: Re: PIX 515 - gimme the short and sweet

Posted: Wed Aug 04, 2010 8:11 pm

Senior Member

Joined: Thu Apr 01, 2010 10:01 pm
Posts: 407
Location: North Carolina
Certs: CCNA

yeah, I know it's old. Buy me an ASA 5505 if you want me to keep up

But with the last PIX version, I should be able to learn what I would like to learn from it. I'm definitely going to buy a book. I'll check and see when it arrives if it has a VAC. I guess these are similar to the VPN modules in routers where they process all of the VPN cryptography rather than the main processor? Is 3DES not installed by default with the PIX OS? thanks for the info. you are both scholars and gentlemen.

_________________
A flute with no holes is not a flute. And, a doughnut with no hole is a Danish.

Top

MonkeyBallz

Post subject: Re: PIX 515 - gimme the short and sweet

Posted: Thu Aug 05, 2010 5:59 am

New Member

Joined: Thu Jun 24, 2010 4:04 am
Posts: 48
Certs: CCNA

i think it would be wise to study the basics first before trying to take short cuts as such... you'll only end up putting more time in your config.. on the flipside.. messing up and spending 2 days extra on the same config can also help you gain skills.. so it depends on how you look at things..

the glas is half full or half empty

Top

sysctl

Post subject: Re: PIX 515 - gimme the short and sweet

Posted: Thu Aug 05, 2010 1:59 pm

Senior Member

Joined: Thu Apr 01, 2010 10:01 pm
Posts: 407
Location: North Carolina
Certs: CCNA

I wasn't necessarily looking for shortcuts. I just wanted the down and dirty on the device I guess. I have to go into town today to pick up my iPhone 4 (finally), so I'll check the bookstores. I find that I learn best by just logging in and plugging away, along with a good reference book beside me. If I hadn't have started building my home lab before I finished the CCNA curriculum, I never would have learned the things I did that were not in the textbooks.

_________________
A flute with no holes is not a flute. And, a doughnut with no hole is a Danish.

Top

cjutting

Post subject: Re: PIX 515 - gimme the short and sweet

Posted: Thu Aug 05, 2010 2:51 pm

Ultimate Member

Joined: Wed Sep 16, 2009 3:16 pm
Posts: 925
Location: Iowa

Down and dirty.. You need the 515e to get the ram upgrade to run the at least the 7.x asa code. (I think it has to do with the 128mb ram upgrade)
Down and dirty.. If 3des isn't enabled find someone with a cco account. It's a free upgrade
Down and dirty.. Pix 6.3(5) is the last pix code you can run

Top

sysctl

Post subject: Re: PIX 515 - gimme the short and sweet

Posted: Thu Aug 05, 2010 4:13 pm

Senior Member

Joined: Thu Apr 01, 2010 10:01 pm
Posts: 407
Location: North Carolina
Certs: CCNA

I went off the wikipedia page when it said the 515 could run 8.0.4. This document http://www.cisco.com/en/US/docs/security/pix/pix80/release/notes/pixrn804.html confirms that it can with max memory/flash.

Yeah, I don't know anyone with a CCO account besides some instructors that I had. I doubt they'd be willing to do that, or if they even have access to the PIX software

_________________
A flute with no holes is not a flute. And, a doughnut with no hole is a Danish.

Top

cjutting

Post subject: Re: PIX 515 - gimme the short and sweet

Posted: Thu Aug 05, 2010 4:54 pm

Ultimate Member

Joined: Wed Sep 16, 2009 3:16 pm
Posts: 925
Location: Iowa

oops.. Sorry. I knew there was ram requirements, but thought it was only the 515e that could take that much ram.

I use to have access to cco, but that was my last job. I'm sure they've changed the password by now

Top

sysctl

Post subject: Re: PIX 515 - gimme the short and sweet

Posted: Sat Aug 07, 2010 6:44 pm

Senior Member

Joined: Thu Apr 01, 2010 10:01 pm
Posts: 407
Location: North Carolina
Certs: CCNA

ok, so I've got the thing in my possession. Cleared passwords, updated firmware. here is my show ver.

Code:

PIX-515> show ver

Cisco PIX Security Appliance Software Version 8.0(4)
Device Manager Version 5.2(2)

Compiled on Thu 07-Aug-08 19:42 by builders
System image file is "Unknown, monitor mode tftp booted image"
Config file at boot was "startup-config"

PIX-515 up 2 mins 38 secs

Hardware:   PIX-515, 64 MB RAM, CPU Pentium 200 MHz
Flash i28F640J5 @ 0x300, 16MB
BIOS Flash AT29C257 @ 0xfffd8000, 32KB

 0: Ext: Ethernet0           : address is 0050.54ff.f732, irq 10
 1: Ext: Ethernet1           : address is 0050.54ff.f733, irq 7
 2: Ext: Ethernet2           : address is 0006.29ef.14f0, irq 9

Licensed features for this platform:
Maximum Physical Interfaces  : 3
Maximum VLANs                : 10
Inside Hosts                 : Unlimited
Failover                     : Disabled
VPN-DES                      : Enabled
VPN-3DES-AES                 : Enabled
Cut-through Proxy            : Enabled
Guards                       : Enabled
URL Filtering                : Enabled
Security Contexts            : 0
GTP/GPRS                     : Disabled
VPN Peers                    : Unlimited

This platform has a Restricted (R) license.

Serial Number: 480320119
Running Activation Key: 0x65694982 0x83f679a9 0xba70ac69 0x24f5881e
Configuration has not been modified since last system restart.

Best I can tell, there is no VAC+. But, it seems that triple DES is enabled. Hopefully one of you guys will chime in with the correctness.

_________________
A flute with no holes is not a flute. And, a doughnut with no hole is a Danish.

Top

cjutting

Post subject: Re: PIX 515 - gimme the short and sweet

Posted: Sat Aug 07, 2010 8:47 pm

Ultimate Member

Joined: Wed Sep 16, 2009 3:16 pm
Posts: 925
Location: Iowa

All be damned.. Good catch in the hardware!

Top

sysctl

Post subject: Re: PIX 515 - gimme the short and sweet

Posted: Sat Aug 07, 2010 8:53 pm

Senior Member

Joined: Thu Apr 01, 2010 10:01 pm
Posts: 407
Location: North Carolina
Certs: CCNA

so yes, then, no VAC+? btw, I scored the thing for $30, best offer was immediately accepted. they have another if anyone is interested. Came max'd out on RAM/flash, which is too bad since I have another 32mb ram stick on the way. There are 3 DIMM slots, but everything I have read says 64mb is the max. I'm happy with it, but I feel like my curiosity to get it working like I want is going to detract from my CCNA V prep.

_________________
A flute with no holes is not a flute. And, a doughnut with no hole is a Danish.

Top

Page 1 of 1

[ 12 posts ]

Board index » Cisco Networking » Cisco Security

All times are UTC - 6 hours [ DST ]

Who is online

Users browsing this forum: No registered users and 10 guests

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum