1、模擬的方法
模擬的方法很簡單,從網上下載pix的IOS(是.bin格式的文件),然後在GNS3的“編輯”–>“首選項”–>”Qemu”–>”PIX”,在binary p_w_picpath中設置相應IOS文件即可。
[PIX的設置界面]
2. PIX的激活
要完全使用PIX的功能,需要激活PIX,激活方法如下(引用自網絡):
pixfirewall> en
Password:
pixfirewall# sh version
Cisco PIX Security Appliance Software Version 7.2(2)
Compiled on Wed 22-Nov-06 14:16 by builders
System p_w_picpath file is “Unknown, monitor mode tftp booted p_w_picpath”
Config file at boot was “startup-config”
pixfirewall up 3 mins 23 secs
Hardware: PIX-525, 256 MB RAM, CPU Pentium II 1 MHz
Flash E28F128J3 @ 0xfff00000, 16MB
BIOS Flash AM29F400B @ 0xfffd8000, 32KB
0: Ext: Ethernet0 : address is 0000.abcd.ef00, irq 9
1: Ext: Ethernet1 : address is 0000.abcd.ef01, irq 11
2: Ext: Ethernet2 : address is 0000.abcd.ef02, irq 11
3: Ext: Ethernet3 : address is 0000.abcd.ef03, irq 11
4: Ext: Ethernet4 : address is 0000.abcd.ef04, irq 11
The Running Activation Key is not valid, using default settings:
Licensed features for this platform:
Maximum Physical Interfaces : 6
Maximum VLANs : 25
Inside Hosts : Unlimited
Failover : Disabled //Failover 不可用
×××-DES : Disabled
×××-3DES-AES : Disabled
Cut-through Proxy : Enabled
Guards : Enabled
URL Filtering : Enabled
Security Contexts : 0
GTP/GPRS : Disabled
××× Peers : Unlimited
This platform has a Restricted (R) license.
Serial Number: 808102688 //序列號
Running Activation Key: 0×00000000 0×00000000 0×00000000 0×00000000 0×00000000 //激活碼
Configuration has not been modified since last system restart.
pixfirewall# activation-key 0xd2390d2c 0×9fc4b36d 0×98442d99 0xeef7d8b1 //輸入激活碼
The following features available in flash activation key are NOT
available in new activation key:
Failover is different.
flash activation key: Restricted(R)
new activation key: Unrestricted(UR)
Proceed with update flash activation key? [confirm]
The following features available in running activation key are NOT
available in new activation key:
Failover is different.
running activation key: Restricted(R)
new activation key: Unrestricted(UR)
WARNING: The running activation key was not updated with the requested key.
The flash activation key was updated with the requested key, and will
become active after the next reload.
pixfirewall# write //保存配置
Building configuration…
Cryptochecksum: 70b1d47e d807251d 47f50cb7 f851d390
1226 bytes copied in 0.800 secs
[OK]
然後在GNS3中直接停掉PIX,重新啓動即可,不能reload。
下面是重啓後的
pixfirewall> en
Password:
pixfirewall# sh version
Cisco PIX Security Appliance Software Version 7.2(2)
Compiled on Wed 22-Nov-06 14:16 by builders
System p_w_picpath file is “Unknown, monitor mode tftp booted p_w_picpath”
Config file at boot was “startup-config”
pixfirewall up 17 secs
Hardware: PIX-525, 256 MB RAM, CPU Pentium II 1 MHz
Flash E28F128J3 @ 0xfff00000, 16MB
BIOS Flash AM29F400B @ 0xfffd8000, 32KB
0: Ext: Ethernet0 : address is 0000.abcd.ef00, irq 9
1: Ext: Ethernet1 : address is 0000.abcd.ef01, irq 11
2: Ext: Ethernet2 : address is 0000.abcd.ef02, irq 11
3: Ext: Ethernet3 : address is 0000.abcd.ef03, irq 11
4: Ext: Ethernet4 : address is 0000.abcd.ef04, irq 11
Licensed features for this platform:
Maximum Physical Interfaces : 10
Maximum VLANs : 100
Inside Hosts : Unlimited
Failover : Active/Active
×××-DES : Enabled
×××-3DES-AES : Enabled
Cut-through Proxy : Enabled
Guards : Enabled
URL Filtering : Enabled
Security Contexts : 2
GTP/GPRS : Disabled
××× Peers : Unlimited
This platform has an Unrestricted (UR) license.
Serial Number: 808102688
Running Activation Key: 0xd2390d2c 0×9fc4b36d 0×98442d99 0xeef7d8b1
Configuration has not been modified since last system restart.
附上我找到的PIX序列號&激活碼
Serial Number: 0x302aab20
Running Activation Key: 0xd2390d2c 0×9fc4b36d 0×98442d99 0xeef7d8b1
Serial Number: 807211225 轉成十六進制後:0x301D10D9
Running Activation Key: 0×5236f5a7 0×97def6da 0×732a91f5 0xf5deef57
Serial Number: 808181272 轉成十六進制後:0x302BDE18
Running Activation Key: 0×052a1524 0×3712a12b 0xb636cc54 0xa178eeac
3、修改PIX Serial Number,套用已有激活碼激活PIX
通常無法獲得與上文中相同的Serial Number,那麼也就沒辦法使用對應的激活碼了。但是,我們可以通過修改GNS3中的PIX參數來修改PIX的Serial Number, 這樣,我們就可以使用已有的激活碼了。
具體操作:
方法一:
“編輯”–>“首選項”–>”Qemu”–>”PIX”–>”PIX Specific Settings”—>”Serial” 注意:要把上面的serial number中的十進制轉成十六進制。用系統計算器就能完成:Windows鍵+R,輸入calc,確定。
點擊左上角“查看”--》“程序員”。將十進制數貼進去,點擊左側十六進制,結果出來了。
方法二:
進入設置的Qemu的工作目錄,找到FW1目錄,修改該目錄下的pemu.ini文件中相應的內容
注:只有在GNS中創建了PIX防火牆,纔會有FW1目錄產生。以此類推,若創建了多個PIX,則就會產生FW2,FW3…等多個目錄。
至此,大功告成。