PIX501 Telnet issue

JakeRutski

Hello everyone-

I have a seemingly simple issue, and I have yet to find an answer. We utilize 18 PIX501 devices for each of our remote terminals.

Recently, I discovered that I cannot execute a successful 'show run' command from certain machines...and to make it more confusing, it only happens on a few of the PIXs. And of course, the system running Cirrus is one that is affected by this, so on 5 of our configs, they are blank.

All of the machines I have tried are either running Windows XP, 2000, or server 2003...I open a command prompt, telnet to the PIX and enter into the enable prompt with no problems whatsoever.

As soon as I type show run and press enter...the curser just stops, and all I see on the screen is:


User Access Verification

Password:
Type help or '?' for a list of available commands.
panama> en
Password: *************
panama# show run

And the curser just sits and blinks...on the same PIX, from a different machine, I get the config just fine...

I have also noted that there is no one else logged into the PIX...I've also tried rebooting it. On the machines where this fails, I also cannot do things that return quite a few lines, such as 'show ?'...

I can work around this by setting "pager lines 24", so that it doesn't return everything at once...but as soon as Cirrus telnets to the PIX, it sets 'no pager' and I'm stuck again.

Any help would be greatly appreciated. Thanks in advance!!

bleearg13

After you do the 'sh run', does anything happen? Are you disconnected from the PIX or can you run other commands? It might be prudent to install Ethereal or Wireshark to see what's happening 'under the hood' when you run your command.

Also, does the Cirrus server sit on the same subnet as the boxes that *do* work?

I know that the PIX supports some type of IP inspection, maybe there is an IDS policy configured on the PIX of which you are unaware?