PIX 515 reloading by itself

Usually that is the way a D.O.S. attack performs for CISCO equipment.

You could install a sniffer in front of the firewall to record the traffic.

"LM" escribió en el mensaje news: snipped-for-privacy@4ax.com...

Type Show Crashinfo in priv mode and see if there is any output. You should get something like this:

Traceback:

followed by more information. Capture it and send it to me in a text file.

Thanks Anthony

Hi,

I've got a PIX 515 that has recently started reloading itself for apparently no reason. At time it was running 6.3(3) and I have since upgraded it to 6.3(4). It is operating standalone. I had the console connected while it reloaded and there was absolutely no error messages of any description. The only odd thing that I notice about the box is that there is a red light coming from what appears to be an LED labelled "CR1" located on the main board. next to the battery. I do not recall that it was like that before... but can't be sure.

Following is the "show ver" from the PIX.. could someone help and provide some hints as to why the box might be reloading by itself? btw, the fan is operating normally.

many thanks, Lei

PIX(config)# show ver

Cisco PIX Firewall Version 6.3(4) Cisco PIX Device Manager Version 3.0(1)

Compiled on Fri 02-Jul-04 00:07 by morlee

PIX up 24 mins 44 secs

Hardware: PIX-515, 64 MB RAM, CPU Pentium 200 MHz Flash i28F640J5 @ 0x300, 16MB BIOS Flash AT29C257 @ 0xfffd8000, 32KB

This PIX has an Unrestricted (UR) license.

In article , LM wrote: :Serial#: 44403520166.. not within the range... thanks for the info :anyway. btw, it wasn't doing that before.. it just started one day.

We have had problems with PIXen sometimes due to the power connector working loose through normal cable strain and vibrations. On our 501's especially, we now usually use cable-ties to hold the connector in place.

thanks for the info... I did "crashinfo save enable" in conf mode.. and observed the box via console for a couple of days.. not on a single did I get a crashinfo after the spontaneous reload.. was that that command I needed to get the PIX to dump the crashinfo??

Thanks, Lei

i had the same problem before. Cisco explained that certained batch of 515 has bad capacitors. Had to RMA back to cisco.