What would the PIX config look like for Pix3?
Remember Multiple Internal Servers/Workstations on the internal side and Multiple Web Servers on the Server side.
Would you need multiple NICs in each machine?
And Hubs on each side of PIX 3?
internet router...
That's what I'm doing with the PIX(Transparent FireWall).
But I'm trying to incorporate a private(corp. Lan) on the same PIX, which I have learned is IMPOSSIBLE to do both.
So now I have to buy more Equipment to accomplish what I thought would be a simple task.
I have a Cisco RV042 and 3 Pix...
Here is the corrected one.
http://www.mediafire.com/file/ndncjotccmw/RV042_2-Pix_Generic-forum.jpghttp://www.mediafire.com/file/ndncjotccmw/RV042_2-Pix_Generic-forum.jpg
Sure, Here it is.
http://www.mediafire.com/file/ndncjotccmw/RV042_2-Pix_Generic-forum.jpghttp://www.mediafire.com/file/ndncjotccmw/RV042_2-Pix_Generic-forum.jpg
I need the:
static (inside,outside) 11.11.11.0 11.11.11.0 netmask 255.255.255.0 0 0
to allow internet access to the 11.11.11.81-87 Server addresses.
But that breaks the internet access for the 192.168.1.3-254(dhcp) addresses.
Supergrrover,
That gives me internet access from 192.168.1.3-254(dhcp addresses) and 11.11.11.80-87.
But I need acccess to 11.11.11.80-87 from 192.168.1.3-254(dhcp). How do I accomplish that?
Thanks, That is what I was afraid of.
Any recommendations?
I have an Cisco RV042 and 2 more Pix 506E's.
Can I accomplish it with those units?
Internet --> RV042 --> Pix1 --> Servers
|
Pix 2 --> Dev
When I remove the static, I lose access to the 11.11.11.80 network.
The static gives access to the servers and the ports on the 11.11.11.80 network as defined in the access-list 101.
I don't want NAT to those servers/ports. It's been configured this way for 6 years and works great.
What I am...
My ISP gave me 11.11.11.80-87 (the 11.11.11. are not the real #'s but everthing else is)
Here is the new scrubbed config:
PIX Version 6.3(4)
interface ethernet0 auto
interface ethernet1 auto
nameif ethernet0 outside security0
nameif ethernet1 inside security100
hostname ABC123
fixup protocol...
Did all of that and still cannot access the internet or computers on the 11.11.11.0 network from 192.168.1.2 computer.
When try to add the
route inside 192.168.1.0 255.255.255.0 192.168.1.1 1
I get
Route already exists
So the line
route outside 0.0.0.0 0.0.0.0 11.11.11.80 1
should read
route outside 0.0.0.0 0.0.0.0 11.11.11.1 1
and remove ALL of the Access-list 102 config that viconsul added?
show ip nat trans*
gives me:
MLE(config)# show ip nat trans *
Invalid keyword: "nat"
Usage: [no] ip address <if_name> <ip_address> [<mask>]
[no] ip address <if_name> <ip_address> <mask> pppoe [setroute]
[no] ip address <if_name> dhcp [setroute] [retry <retry_cnt>]
[no]...
Thanks burtsbees.
I posted in the Pix forum 4 days ago, no replys, so thought that I'd try here.
I CANNOT ping the outside interface(or anythng on the outside)from the 192.168.1.5 (dhcp)
From a pc on the 192.168.1.0(dhcp) network:
I cannot ping anything on either interface except for the...
I have a PIX 506E.
My ISP assigned 11.11.11.80-87 (Not Real ip's for Security Reasons)
I have dhcp configured, but cannot access anything on the 11.11.11.x network or the internet from a PC that obtained it's Network Config via the PIX dhcp.
Everything else works correctly.
What am I missing...
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.