Remote PIX 501 software upgrade

[pwa]

I have pix to pix vpn set up. I need to upgrade the software and pdm on the remote pix 501. Is there any way to upgrade the software besides setting up a TFTP server at this remote site?

Thanks,
Danny

 

[yizhar]

HI.

I think that a local TFTP is the way to go, but you can also try this:

* Add an entry to the access-list bound to your crypto map (in each pix), that will instruct the pix to encrypt traffic between internal network in site A (where your TFTP server is), and the pix **OUTSIDE** interface in site B (the remote site that your asking about).

That way the TFTP proccess might work over the VPN tunnel.

The current versions of pix OS support tftp command without the need to have console cable and "monitor" mode:

copy tftp flash

You have a pix 501 so I guess that the current OS on it will support this but you should try and see for your self.

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar

 

[pwa]

Thanks! This worked great. I did have to temporarily open up a hole in our firewall to allow the port for tftp from the outside interface of the remote pix to my tftp server.

Danny