Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations biv343 on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

can not log in DMZ

Status
Not open for further replies.

MichaelDay

IS-IT--Management
May 1, 2003
98
US
For some reason, My IE can not load DMZ for Pix firewall 506E. I type this address to the address bar and nothing showing up and it seems like page can not be found.

Here is my configureation. Could someone please help me?
PIX Version 6.1(4)
nameif ethernet0 outside security0
nameif ethernet1 inside security100
enable password B71qQLqC257Zu2gl encrypted
passwd 2Gpmol0i6pXuHEHP encrypted
hostname BlackHole
domain-name world.org
fixup protocol ftp 21
fixup protocol http 80
fixup protocol h323 1720
fixup protocol rsh 514
fixup protocol rtsp 554
fixup protocol smtp 25
fixup protocol sqlnet 1521
fixup protocol sip 5060
fixup protocol skinny 2000
fixup protocol smtp 110
fixup protocol http 443
no names
access-list INBOUND permit tcp any host 67.64.13x.xx eq domain
access-list smtp permit tcp any host 67.64.13x.xx eq smtp
access-list smtp permit tcp any host 67.64.13x.xx eq smtp
pager lines 24
logging on
interface ethernet0 10baset
interface ethernet1 10baset
icmp permit any unreachable outside
icmp permit any echo-reply outside
icmp deny any echo outside
mtu outside 1500
mtu inside 1500
ip address outside 67.64.13x.xx 255.255.255.248
ip address inside 192.168.1.1 255.255.255.0
ip verify reverse-path interface outside
ip audit info action alarm
ip audit attack action alarm
pdm location 192.168.1.8 255.255.255.255 inside
pdm location 192.168.1.8 255.255.255.248 inside
pdm location 192.168.1.11 255.255.255.255 inside
pdm history enable
arp timeout 14400
global (outside) 101 interface
nat (inside) 101 0.0.0.0 0.0.0.0 0 0
static (inside,outside) 67.64.133.42 192.168.1.8 netmask 255.255.255.255 0 0
access-group smtp in interface outside
route outside 0.0.0.0 0.0.0.0 67.64.133.46 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h323 0:05:00 si
p 0:30:00 sip_media 0:02:00
timeout uauth 0:05:00 absolute
aaa-server TACACS+ protocol tacacs+
aaa-server RADIUS protocol radius
http server enable
http 192.168.1.8 255.255.255.255 inside
no snmp-server location
no snmp-server contact
snmp-server community public
no snmp-server enable traps
floodguard enable
sysopt route dnat
service resetinbound
telnet 192.168.1.8 255.255.255.248 inside
telnet timeout 5
ssh timeout 5
terminal width 80
Cryptochecksum:c9af8deb9729c93089068795851fe47c
 
By DMZ you mean PDM, right?

You're only allowing access from a machine at 192.168.1.8, ie;

http 192.168.1.8 255.255.255.255 inside

So is that the machine you're trying to connect from?

CCNA, MCSE, Cisco Firewall specialist, VPN specialist, wannabe CCSP ;)
 
Yes, I am sitting at the machine connect serial cable to the Pix506E and has IP 192.168.1.8

Yes, PDM. Sorry!
 
You do have a network cable connected between the pc and the inside nic of the pix, don't you? Because you can't use pdm down a serial cable ...

CCNA, MCSE, Cisco Firewall specialist, VPN specialist, wannabe CCSP ;)
 
Yes, Everything been hooked up. The PDM worked for me before, then suddenly, it does not work any more. Don't know why
 
You could try regenerating the crypto keys, they may have been corrupted. In a hyperterminal session (or a console connection anyway) enter the following
into configure mode

ca zeroize rsa

Then enter

ca generate rsa key 1024

then wait till you get a confirmation the keys have been generated, close your browser window, reopen it and go back to
CCNA, MCSE, Cisco Firewall specialist, VPN specialist, wannabe CCSP ;)
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top