首先去申 请一个新的key，CISCO会提示我们输入PIX的serial number。在PIX上找一下，在电源插口附近肯定能找到相应的标签，将标签上的数字输入CCO对话框中，不用多久cisco就会将key寄到你的 email。
申请des加密的key是免费的，申请3des/aes加密的key需要有Partner以上等级的权限。
monitor> interface 1
0: i8255X @ PCI(bus:0 dev:13 irq:10)1: i8255X @ PCI(bus:0 dev:14 irq:7 )2: i8255X @ PCI(bus:0 dev:17 irq:9 )Using 1: i82559 @ PCI(bus:0 dev:14 irq:7 ), MAC: 0001.64ff.cd57
monitor> address 192.168.10.244address 192.168.10.244 ------------------------------------pix的地址.monitor> server 192.168.10.5 -------------------------------pc机的地址.server 192.168.10.5monitor> file pix634.binfile pix634.bin ---------------------------------------------------pc-server上的IOS的文件名.monitor> tftptftp ...........................................................................................................................................
............................................................................................
...........................................................
Received 2082816 bytesSecure PIX Firewall admin loader (3.0) #0: Thu Jul 1 23:49:40 PDT 2004
Flash=i28F640J5 @ 0x300BIOS Flash=AT29C257 @ 0xd8000Flash version 6.3.4, Install version 6.3.4Installing to flash
Serial Number: 480380360 (0x1ca205c8)
Activation Key: 0 0 0 0Do you want to enter a new activation key? [n]y
Enter Activation Key Part 1 of 4: ca6b4fbd Part 2 of 4: cbad753b Part 3 of 4: 22274aad Part 4 of 4: 9f1be105Writing 1966136 bytes p_w_picpath into flash...
###############################################################################################################
128MB RAMmcwa i82559 Ernet at irq 10 MAC: 0001.64ff.cd56mcwa i82559 Ethernet at irq 7 MAC: 0001.64ff.cd57mcwa i82558 Ethernet at irq 9 MAC: 0008.c78c.ad56Flash=i28F640J5 @ 0x300BIOS Flash=AT29C257 @ 0xfffd8000-----------------------------------------------------------------------
|| || || || |||| |||| ..:||||||:..:||||||:.. c i s c o S y s t e m s Private Internet eXchange----------------------------------------------------------------------- Cisco PIX FirewallCisco PIX Firewall Version 6.3(4)Licensed Features:Failover: Disabled×××-DES: Enabled×××-3DES-AES: EnabledMaximum Physical Interfaces: 3Maximum Interfaces: 5Cut-through Proxy: EnabledGuards: EnabledURL-filtering: EnabledInside Hosts: UnlimitedThroughput: UnlimitedIKE peers: UnlimitedThis PIX has a Restricted (R) license.
****************************** Warning *******************************Compliance with U.S. Export Laws and Regulations - Encryption.This product performs encryption and is regulated for exportby the U.S. Government.This product is not authorized for use by persons locatedoutside the United States and Canada that do not have priorapproval from Cisco Systems, Inc. or the U.S. Government.This product may not be exported outside the U.S. and Canadaeither by physical or electronic means without PRIOR approvalof Cisco Systems, Inc. or the U.S. Government.Persons outside the U.S. and Canada may not re-export, resellor transfer this product by either physical or electronic meanswithout prior approval of Cisco Systems, Inc. or the U.S.Government.******************************* Warning *******************************Copyright (c) 1996-2003 by Cisco Systems, Inc.
Restricted Rights Legend
Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph(c) of the Commercial Computer Software - RestrictedRights clause at FAR sec. 52.227-19 and subparagraph(c) (1) (ii) of the Rights in Technical Data and ComputerSoftware clause at DFARS sec. 252.227-7013.Cisco Systems, Inc.
170 West Tasman Drive San Jose, California 95134-1706 Cryptochecksum(changed): d41d8cd9 8f00b204 e9800998 ecf8427e Pre-configure PIX Firewall now through interactive prompts [yes]? n Type help or '?' for a list of available commands.pixfirewall>enpixfirewall#cony tftp flash ---------------------------------------------------------保存ios到flash.