Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Westi on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

hay guys i have finished my ccna an

Status
Not open for further replies.

dragon20

Technical User
Oct 14, 2003
2
AU
hay guys i have finished my ccna and finisehd my ccnp sem 5

i had to work on a pix firewall 515 with ios 5.2 the other day

all i had to do was run the internet adsl modem on the outside and just a hub on the inside with afew pc's

but i couldnt get it to work

the problem was not the outside as i just did a dhcp setroute command to automatically grab the modem address as it changes

the address was somthing like 203.64.25.254

once i set that up i could ping the outside interface and the modem so that was fine

the MAJOR problem was that in my inside interface 192.168.0.1 i could ping the interface
but i couldnt ping any computers on it, non of the computers could ping the interface i did soo many things to get it working but still i even unpluged the outside interface etc

i dont know if iam missing somthing but do both interfaces have to be up and working in order to be able to ping the side one?

iam not sure as iam new to the pix

my configuration was preety simple

nameif ethernet0 outside security0
nameif ethernet1 inside security100
interface ethernet0 auto
interface ethernet1 auto
ip address outside dhcp setroute
ip address inside 192.168.0.1 255.255.255.0
hostname pixfirewall
nat (inside) 1 0 0
i also tried nat with a specfic range

the other little problem i had was that the line protocol was down somtimes i think this was becuase it hadnt refreshed so i just typed in clear int and it was fine? should this happen?

also wanted to ask with the pix is there any command that shows everything like a show run on a router
i know about the show int ip etc but yea

But basically i just wanted to ask if that configuration should work

and also wanted to ask do i need to put in anything else in or for those pc's to connect to the net thanks a lot
 
Did you forget to set the gloabl command? You need to tell the PIX what addresses to NAT to.
 
global (outside) 1 interface

this will allow the inside traffic to xlate off the pix eth0 ip (saves some pub ip's)
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top