Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Westi on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

iis in dmz to sql internally not talking

Status
Not open for further replies.

pachucos

MIS
Nov 21, 2002
38
US
I need help I have a new pix setting up IIS server on DMZ to feed a web page to the internet and to run SQL queries to a internal MSSQL server. I am able to telnet into the web server but I am unable to bring up a web page also I am unable to run any sql queries. getting message that there is no server available.
Is there anything special about setting this up?
Am I missing something?
Please Help.
Here is the config for the pix.

PIX Version 6.2(2)
nameif ethernet0 outside security0
nameif ethernet1 inside security100
nameif ethernet2 dmz1 security50
nameif ethernet3 intf3 security15
nameif ethernet4 intf4 security20
nameif ethernet5 intf5 security25
enable password ******** encrypted
passwd ********* encrypted
hostname pix515
domain-name test.com
clock timezone MST -7
clock summer-time MDT recurring
fixup protocol ftp 21
fixup protocol http 80
fixup protocol h323 h225 1720
fixup protocol h323 ras 1718-1719
fixup protocol ils 389
fixup protocol rsh 514
fixup protocol rtsp 554
fixup protocol smtp 25
fixup protocol sqlnet 1521
fixup protocol sip 5060
fixup protocol skinny 2000
names
access-list dmz_in permit tcp any any eq www
access-list dmz_in permit tcp host 10.10.10.11 host y.y.y.25 eq sqlnet
access-list dmz_in permit icmp any any
access-list dmz_in permit tcp any host X.X.X.116
access-list dmz_in permit tcp host 10.10.10.11 any
access-list 101 permit tcp any host x.x.x.116
pager lines 24
logging on
logging timestamp
logging trap debugging
logging host inside y.y.y.y
interface ethernet0 auto
interface ethernet1 auto
interface ethernet2 auto
interface ethernet3 auto shutdown
interface ethernet4 auto shutdown
interface ethernet5 auto shutdown
mtu outside 1500
mtu inside 1500
mtu dmz1 1500
mtu intf3 1500
mtu intf4 1500
mtu intf5 1500
ip address outside x.x.x.115 255.255.255.240
ip address inside y.y.y.6 255.255.255.0
ip address dmz1 10.10.10.10 255.255.255.0
ip address intf3 127.0.0.1 255.255.255.255
ip address intf4 127.0.0.1 255.255.255.255
ip address intf5 127.0.0.1 255.255.255.255
ip verify reverse-path interface outside
ip verify reverse-path interface dmz1
ip audit info action alarm
ip audit attack action alarm
no failover
failover timeout 0:00:00
failover poll 15
failover ip address outside 0.0.0.0
failover ip address inside 0.0.0.0
failover ip address dmz1 0.0.0.0
failover ip address intf3 0.0.0.0
failover ip address intf4 0.0.0.0
failover ip address intf5 0.0.0.0
pdm location y.y.y.7 255.255.255.255 inside
pdm location y.y.y.65 255.255.255.255 inside
pdm logging debugging 100
pdm history enable
arp dmz1 10.10.10.11 000b.cd4f.424d alias
arp timeout 14400
global (outside) 1 interface
nat (inside) 1 10.10.10.0 255.255.255.0 0 0
alias (inside) x.x.x.116 10.10.10.11 255.255.255.255
static (dmz1,outside) tcp interface 255.255.255.255
0 0
static (inside,dmz1) y.y.y.25 y.y.y.25 netmask 255.255.255.255 0 0
static (inside,dmz1) y.y.y.0 y.y.y.0 netmask 255.255.255.255 0 0
static (dmz1,outside) x.x.x.116 10.10.10.11 netmask 255.255.255.255 0 0
access-group 101 in interface outside
access-group dmz_in in interface dmz1
route outside 0.0.0.0 0.0.0.0 x.x.x.113 1
route dmz1 10.10.10.10 255.255.255.255 x.x.x.113 1
route inside y.0.0.0 255.0.0.0 y.y.y.1 1
timeout xlate 1:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h323 0:05:00 si
p 0:30:00 sip_media 0:02:00
timeout uauth 0:05:00 absolute
aaa-server TACACS+ protocol tacacs+
aaa-server RADIUS protocol radius
aaa-server LOCAL protocol local
http server enable
http y.y.y.y 255.255.255.255 inside
http y.y.y.y 255.255.255.255 inside
snmp-server location ITS
snmp-server contact IT Admin
snmp-server community private
no snmp-server enable traps
floodguard enable
no sysopt route dnat
telnet y.y.y.y 255.255.255.0 inside
telnet timeout 5
terminal width 80
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top