Firewall Wizards: RE: PIX Licensed Connections Limit

["Ahmed, Balal" <balal.ahmed () cgey com>]

When you upgrade your liscenced features you will be provided with an
'activiation key' This is provided by cisco and is coded to your Flash bios
serial number. When you enter the new activation code it will be written to
flash. You need a 16 MB flash card to load in a 6.x image so if you have a
2MB flash card you will need to upgrade that as well

Cisco TAC generate the key for you. A DES key is issued free of charge and
you can apply for one by emailing TAC () cisco com with your flash card serial
number (this is shown when you issue a show version cammand on the PIX) and
the hardware version, in your case the PIX 520. They normally issue an
unlimited connections key as part of the DES key.

I have seen a PIX that has been licensed for 1024 Connections still pass
traffic.  has anyone else seen this behaviour ?



-----Original Message-----
From: Noonan, Wesley [mailto:Wesley_Noonan () bmc com]
Sent: 17 April 2003 02:20
To: 'Alan R. Young'; firewall-wizards () honor icsalabs com
Subject: RE: [fw-wiz] PIX Licensed Connections Limit


It is the software code, IIRC. It will change the activation key which
essentially tells the PIXOS to allow unlimited connections, similar to how
you enable 3DES support, etc. To my knowledge, that is all that changes. HTH

Wes Noonan, MCSE/CCNA/CCDA/NNCSS/Security+
Senior QA Rep.
BMC Software, Inc.
(713) 918-2412
wnoonan () bmc com
http://www.bmc.com


> -----Original Message-----
> From: Alan R. Young [mailto:aryoung () veros com]
> Sent: Wednesday, April 16, 2003 20:17
> To: firewall-wizards () honor icsalabs com
> Cc: Noonan, Wesley
> Subject: RE: [fw-wiz] PIX Licensed Connections Limit
>
> Wesley:
>
> I understand, I certainly want to be legal and all that, but the nature of
> my question is more regarding "what technically is necessary".
>
> When I buy a license, what changes, are they giving me a chip, a disk, or
> simply a different boot floppy, etc. ? am I going to have to open the box
> and change hardware, or is it simply a tftp update?  Do I change some
> flash rom? Or is the license quantity simply a different CISCO os version
> that I boot up with?
>
> I do not understand what will change when I get more licenses.
>
> Alan
>
>
> -----Original Message-----
> From: Noonan, Wesley [mailto:Wesley_Noonan () bmc com]
> Sent: Wednesday, April 16, 2003 6:10 PM
> To: Alan R. Young; firewall-wizards () honor icsalabs com
> Subject: RE: [fw-wiz] PIX Licensed Connections Limit
>
> You need to purchase a license. Talk to your Cisco rep and he can hook you
> up. That's the legal answer at least...
>
> Thanks.
>
> Wes Noonan, MCSE/CCNA/CCDA/NNCSS/Security+
> Senior QA Rep.
> BMC Software, Inc.
> (713) 918-2412
> wnoonan () bmc com
> http://www.bmc.com
>
>
> > -----Original Message-----
> > From: Alan R. Young [mailto:aryoung () veros com]
> > Sent: Wednesday, April 16, 2003 19:28
> > To: firewall-wizards () honor icsalabs com
> > Subject: [fw-wiz] PIX Licensed Connections Limit
> >
> > Hey All
> >
> > I just bought a PIX 520 on ebay.
> >
> > My question is, how can the licensed connections number be changed?
> >
> > Is that a flash rom setting, or what?
> >
> > What do I do to change it to unlimited connections?
> >
> > Thanks
> > Alan Young
> > aryoung () veros com
> >
> >
> > Cisco PIX 520 Firewall PII 350 MHz
> > Model: PIX-520 Rev C0
> > 128 MB Ram
> > Two Ethernet Cards 10/100
> > Floppy Disk Drive
> > PIX Version 4.4(5)
> > Bios v3.3
> > Licensed Connections: 1024
> > This is captured file:
> > Finesse Bios V3.3
> > Booting Floppy
> > Loading from Flash
> > 128MB RAM
> > Flash=AT29C040A @ 0x300
> > mcwa i82559 Ethernet at irq 11  MAC: xxxxxxxxxxxxxx
> > mcwa i82559 Ethernet at irq 10  MAC: xxxxxxxxxxxxxx
> >   ----------------------------------------------------------------------
> -
> >                                ||        ||
> >                                ||        ||
> >                               ||||      ||||
> >                           ..:||||||:..:||||||:..
> >                          c i s c o S y s t e m s
> >                         Private Internet eXchange
> >   ----------------------------------------------------------------------
> -
> >                                PIX Firewall
> >
> > PIX Version 4.4(5)
> > Licensed Connections: 1024
> > Maximum Interfaces :  6
> > Global ()will be Port Address Translated
> > Cryptochecksum(unchanged): c60b7852 a9d77cf1 1994b34c 2d9290aa
> > Copyright (c) 1996-1999 by Cisco Systems, Inc.
> >
> >
> >
> > _______________________________________________
> > firewall-wizards mailing list
> > firewall-wizards () honor icsalabs com
> > http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards


********************************************************************************************
" This message contains information that may be privileged or confidential and 
is the property of the Cap Gemini Ernst & Young Group. It is intended only for 
the person to whom it is addressed. If you are not the intended recipient, you 
are not authorized to read, print, retain, copy, disseminate, distribute, or use 
this message or any part thereof. If you receive this message in error, please 
notify the sender immediately and delete all copies of this message ".
********************************************************************************************

_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards