Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

Register Log in
  • Congratulations derfloh on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Search results for query: *

  • Users: dx1
  • Order by date
  1. dx1

    pix to pix and vpn

    Yes, you can have pix to pix vpn and pix to vpn clients. See: http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00800948b8.shtml
  2. dx1

    Pix 501Config

    I don't see a NAT statement in there. nat 1 0 0
  3. dx1

    Can't access WAN

    Make sure your NAT statment on the PIX covers their subnet. From the PIX, can you ping a wks on the remote subnet? Make sure you have a route inside statement on the PIX for the remote subnet and point it to 10.1.1.254.
  4. dx1

    Can't access WAN

    What's the default gateway for the wks? It should be 10.1.1.254. On 10.1.1.254, make sure you have a default route to the PIX (10.1.1.2) and a specific route to the stores or via a routing protocol. On the PIX, make sure you have a route inside for the store subnet and point it to 10.1.1.254...
  5. dx1

    Authenticate to use switch port

    802.1x is what your looking for. http://www.cisco.com/en/US/products/hw/switches/ps708/products_configuration_guide_chapter09186a00800da6ff.html
  6. dx1

    Please help evaluate security options

    Blackberry has a doc here: http://www.blackberry.com/knowledgecenterpublic/livelink.exe?func=ll&objId=279244&objAction=browse&sort=name that recommends the server behind the firewall. The connection is outbound only so I don't think you will need a static entry. We have it behind the firewall...
  7. dx1

    PIX Routing Problem

    Depending on how many clients you have, I would much rather change 2 IP address, the PIX and the router and be over with.
  8. dx1

    PIX 515-e and DMZ a webserver

    If you want to have a DMZ, you will need another interface. She is referring to a PIX-1FE. If you have an old Intel card laying around, you could possibly use it....depending on the chipset. Do so at your own risk. I personally would just buy the card....not that expensive.
  9. dx1

    PIX Routing Problem

    Change the inside ip address of the PIX. Make your router's LAN IP 192.168.1.1. On your router, add a defult route and point it to the PIX inside address and a route for the 192.168.11.0 and point it to the far router's serial address. On your PIX, add a route inside for the other subnet and...
  10. dx1

    Catalyst 2950

    Check to make sure all the ports are on the same vlan and they are not shutdown. Is this a brand new switch or is it used? If new, should be able to just plug and go...if it's used, it might have been pre-configured with different vlans. If you can, post the config.
  11. dx1

    How to connect Cisco 2611 xm with 3com office connect 111

    Not familiar with the 3com product but you should be able to bridge them. Make sure to set the encap type on the Cisco side to ppp.
  12. dx1

    PIX 501 example

    Try this: http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a0080094761.shtml
  13. dx1

    ICMP inbound

    Here's my acl to allow outgoing icmp: access-list IN permit icmp any any echo-reply access-list IN permit icmp any any source-quench access-list IN permit icmp any any unreachable access-list IN permit icmp any any time-exceeded Apply that to the outside interface.
  14. dx1

    FTP server behind PIX firewall

    Port 21 should be fine. Fixup protocol ftp should be on by default.
  15. dx1

    Wireless Cisco Products. Need Info.

    Go straight to the source: http://www.cisco.com/en/US/products/hw/wireless/index.html
  16. dx1

    New Site - Architecture question

    I would not use the 3640 to route between the subnets. I think your 3750 supports routing depending on what IOS you have. EMI supports full dynamic routing and SMI supports basic RIP and static. I would create 3 separate VLANs on the 3750 for each floor. For DHCP, add the ip helper address...
  17. dx1

    non-contiguous public IP's...and global/static/nat prob

    You are correct. Your ISP routes the new subnet to you. Once it hits your router, it needs to know where to go. You don't see the other route statement because the PIX IP and your router interface are on the same subnet.
  18. dx1

    non-contiguous public IP's...and global/static/nat prob

    ip route xxx.194.91.104 255.255.255.248 xxx.194.91.250
  19. dx1

    non-contiguous public IP's...and global/static/nat prob

    On the router, add a route for the new subnet and point it to the outside ip of the PIX.
  20. dx1

    Pix net connection died

    >logging host inside 172.16.0.4 6/1470 Looks like your doing tcp syslogging. Was the syslog server offline or is the HD full? Everything else looks fine.

Part and Inventory Search

Back
Top