308win,
Sorry, in my haste to post the config I removed a couple of lines. These two lines are in the running config right now.
access-list 100 permit ip 10.1.1.0 255.255.255.0 10.12.12.0 255.255.255.0
access-list 100 permit ip 192.168.1.0 255.255.255.0 10.12.12.0 255.255.255.0
Does this...
Here's my pix config. All of the other devices are getting through to the dmz except for the site to site. Any suggestions?
PIX Version 6.3(3)
interface ethernet0 auto
interface ethernet1 auto
interface ethernet2 auto
nameif ethernet0 outside security0
nameif ethernet1 inside security100...
We were using MS Proxy 2.0 and we had some of the end users configured as winsock proxy clients because of a program that was installed on their machines. We want to do away with the MS Proxy 2.0 server and replace it with a linux Squid Proxy server. Unfortunately, the program they were using...
Answered my own question. Everything is working great. I found that the tac_plus-F4.0.3.alpha-5.i386.rpm from redhat was pretty easy to install and using yihzar's pixscript to verify settings in the pix config worked out great. Sweet.
I want to utilize Cisco's freebie tacacs+ and have been noticing that the example configs out there keep referencing that the config is running on a router with ios 11.x or whatever. I need clarification. How many different parts are there to a basic installation? The linux server with the...
Using Dynamic Crypto Maps
As far as this access list goes I am a little confused. The source and destination ip addresses, what are they doing, where are they going, and what interface are they bound to? Is there a need of an ip local pool of some sort? This is the config that I am currently...
I believe this should get you some traffic heading out. I have just started messing around with access-lists and have been successful so far. Hopefully I am pointing you in the right direction.
access-list acl_in permit tcp any any eq 80
access-list acl_in permit tcp any any eq 443...
Is it common to deny tcp traffic entirely on ones network and only allow specific ip addresses out to the internet depending on port (80, 443, etc.)? Here is an example:
access-list account_in permit tcp 10.1.1.117 255.255.255.255 any eq 80
access-list account_in permit tcp 10.1.1.44...
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.