can't enter "fixup protocol dns"

[yert33]

PIX 520 version 6.3(1). When I try to enter

fixup protocol dns

I get wrong number of arguments supplied....

What's the syntax, please?

 

[dopehead]

Well, the command is ok you are just missing the dns query length parameter.
"fixup protocol dns maximum-length 512"

Jan



Network Systems Engineer
CCNA/CQS/CCSP

 

[yert33]

If I enter it as you describe it does the same thing. I have firewall version 6.3(1) on this PIX. Not sure if that version supports the fixup protocol dns command or not....

 

[dopehead]

Nope, get 6.3.3

Jan

Network Systems Engineer
CCNA/CQS/CCSP

 

[yert33]

Thank you. Am I SOL because I bought my PIX on eBay and don't know how to upgrade the version?

 

[dopehead]

As far as i know, just as long as the fee has been payed (bu the first person that bought the device) you can get free upgrades within the same major release. contact cisco to get your software.

Jan

Network Systems Engineer
CCNA/CQS/CCSP

 

[yert33]

good to know, dopehead. I'll follow up on that. I've never upgraded PIX software before. Is there a more detailed link you can send me to?

Thx!

 

[dopehead]

Well, if you are running 6.3(1) you could use "copy tftp://x.x.x.x/pix633.bin flash:image" , where x.x.x.x is the address of your tftp server on a pc preferably on the inside, and pix633.bin is the OS for the pix from cisco. Much like an ios box.

Also you can get it from a http webserver if you wan't that, the syntax is the same just change tftp to http

Jan

Network Systems Engineer
CCNA/CQS/CCSP

 

[ststokes]

Actually, your call to Cisco will not be all that pleasant. Buying equipment second hand makes Cisco call it "Grey Market". So, they will not allow you to register a support contract with it. You will have to buy a software license from Cisco to get a support contract to get the software updates.

Sorry. Don't shoot the messenger.

Scott
CCNA, CCSE, CCSP, ISS-CE