Cannot ping outside of the firewall

[de1458]

Hi all,

I am new to PIX FW, my company,only 30 hosts, switch from fractional T1 to Dsl w/static IPs, the PIX works fine for frame relay, but the problem now is the T1 router is removed from outside, the current connection is the PIX direct connect to outside. from the PIX is able to ping any inside and outside host without any problem, but inside hosts is not able to ping outside.
I am search cisco website and not been able to get a sample configuration on the similar situation, direct to ISP w/o a router. so could anyone help or a configuration sample is very welcome and appreciated.
here are some config lines, note the rest of the command are default config from the PIX
-----------------------
ip address outside 66.xx.xxx.14 255.255.255.240
ip address outside 10.100.xx.4 255.255.255.0

global (outside) 1 66.xx.xxx.6-66.xx.xxx.13 netmask 255.255.255.240
nat (inside) 1 0.0.0.0 0.0.0.0

static (inside, outside) 66.xx.xxx.2 10.100.xx.2 netmask 255.255.255.255 0 0
static (inside, outside) 66.xx.xxx.3 10.100.xx.3 netmask 255.255.255.255 0 0

conduit permit icmp any any echo
conduit permit icmp any any echo-relay

route outside 0.0.0.0 0.0.0.0 66.13.137.1 1
route inside 10.100.xx.0 255.255.255.0 10.100.xx.255 1

Thanks,
Dennis

 

[bigdog175]

You just use the single network setup. The DSL has to go thru a DSL router/modem just use that IP as if it were the router as in the sample setups. Double check your routes the PIX is NOT a router. Hope this helps.

 

[de1458]

Thanks for your reply,
I am aware that PIX does not act/designed to be router, but I was told that the PIX could directly connect to DSL modem without a router in between

Dennis

 

[bigdog175]

Maybe I wasn't very clear, Yes, you can use PIX without a router. what I meant to say was that whatever your ISP provides for your connection has an IP on it that's the one I'm saying to use in place of the router's ip in the example setup on CCO. Also I'm not sure whether you type the above config by hand ,maybe it's just a typo but in your ip address you have two outside adds. Also your route inside statement unless 10.100.xx.0 the xx is a different subnet your directing traffic back onto to itself. Anyway just my two cents worth..

 

[Riteon]

Dennis - have you put your DNS entries in?

dhcp dns xx.xx.xx.xx xx.xx.xx.xx

Regards

Riteon

 

[de1458]

Thank you for all your replies,