Link to home
Start Free TrialLog in
Avatar of SkipFire
SkipFire

asked on

Reset password on PIX 501

How can I recover the password on a PIX 501?  I have the default password, and I had reset both the default and the admin password awhile back, and confirmed it, however now it is not working and I cannot recall the previous admin password.  I know almost nothing about working with PIX 501 and always use step-by-step instructions for anything I do on it (which is maybe 2 tasks per year).
ASKER CERTIFIED SOLUTION
Avatar of batry_boy
batry_boy
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of SkipFire
SkipFire

ASKER

I take it there is no safe way to do it remotely?
Nope, since you have to do it from monitor mode which means that has to be a local console connection...sorry
And what is monitor mode, is that using a serial cable with hyper-terminal?
It's just a low level interface before the actual PIX code is loaded that lets you perform maintenance procedures (like password recovery) on the firewall.  Yes, you use the blue serial cable that came with the PIX to connect your PC's COM port to the "Console" port on the PIX.  It should all be documented in that link that I sent you above.
Is the blue cable special?  I have a regular serial cable, but the PIX was implemented by a previous vendor 4 or 5 years ago.
It's what Cisco calls a rollover cable...the pinouts are the following:

1 - 8
2 - 7
3 - 6
4 - 5
5 - 4
6 - 3
7 - 2
8 -1
Ok, is there any way to do this without that cable?
Nope, but you can make your own cable if you know how to make an Ethernet cable...just use the pinout I gave you above on either end of the Ethernet cable and crimp RJ-45 connectors on...you will also need a DB9 serial to RJ-45 adapter, but you should be able to find one of those in a computer parts store or online.

Here's a link to a how-to for making the rollover cable:

http://cisco.bupt.edu.cn/class-homepage/corelab/sem1/chap3/CCNA1_lab_inst_3_1_9d_en.pdf
That sounds easy enough, I may be back in a few days after I get the adapter and try to reset the passwords.
Ok, I have all the parts, but the RJ45 to DB9 is not assembled.  The DB9 is numbered, but I don't know how the RJ45 receiver is numbered.  Is it clip down and 1 on the left as I am looking in?
No, 1 is on the right as your looking at the brass contacts with the clip down.
I built it to specs, but it doesn't work.  There may be more serious issues though, it turns out that the internal battery clip has broken loose and is just flopping around inside.
That could be an issue, yes.  Sorry I can't help with hardware isssues such as that via a forum like this...I appreciate the points, but feel free to take the points back, if possible, since I think you have a completely separate issue here.
I think your solution was correct, and it answered the question I asked.  Just because the problem turns out to be something other than I thought does not make your answer any less valid.  Thanks for all the help, I'll just replace the PIX with something easier to manage like a Linksys RV042.  I thought the PIX was overkill for them anyway.
Thanks for the points.  Good luck and see you in the forums!