New PIX 515E no info passing anywhere 1

[dam9178]

Brilliant People Please Help.

My boss has asked my to get setup a PIX515E. I have never seen one before. I think I have read possibly everything there is to read and just can not figure out what to do.

My setup is as basic as possible. My computer on the inside of the firewall and the network on the outside.
I am just trying to access ANYTHING through the firewall. I can't see the network (IP's 147.58.31.2-147.58.31.254), the web IP 147.58.31.1 and the DNS server on 147.58.25.5.

I can see everything through pings but i can not get any information to pass either direction.


PIX Version 6.3(1)
interface ethernet0 100full
interface ethernet1 100full
interface ethernet2 auto shutdown
interface ethernet3 auto shutdown
interface ethernet4 auto shutdown
interface ethernet5 auto shutdown
nameif ethernet0 outside security0
nameif ethernet1 inside security100
nameif ethernet2 intf2 security4
nameif ethernet3 intf3 security6
nameif ethernet4 intf4 security8
nameif ethernet5 intf5 security10
enable password 8Ry2YjIyt7RRXU24 encrypted
passwd 2KFQnbNIdI.2KYOU encrypted
hostname pixfirewall
fixup protocol ftp 21
fixup protocol h323 h225 1720
fixup protocol h323 ras 1718-1719
fixup protocol http 80
fixup protocol ils 389
fixup protocol rsh 514
fixup protocol rtsp 554
fixup protocol sip 5060
fixup protocol sip udp 5060
fixup protocol skinny 2000
fixup protocol smtp 25
fixup protocol sqlnet 1521
names
access-list ping permit icmp any any
pager lines 24
icmp permit any outside
mtu outside 1500
mtu inside 1500
mtu intf2 1500
mtu intf3 1500
mtu intf4 1500
mtu intf5 1500
ip address outside 147.58.31.4 255.255.255.0
ip address inside 10.10.10.1 255.255.255.0
no ip address intf2
no ip address intf3
no ip address intf4
no ip address intf5
ip audit info action alarm
ip audit attack action alarm
no failover
failover timeout 0:00:00
failover poll 15
no failover ip address outside
no failover ip address inside
no failover ip address intf2
no failover ip address intf3
no failover ip address intf4
no failover ip address intf5
pdm location 10.10.10.0 255.255.255.0 inside
pdm history enable
arp timeout 14400
global (outside) 1 interface
nat (inside) 1 0.0.0.0 0.0.0.0 0 0
access-group ping in interface outside
route outside 0.0.0.0 0.0.0.0 147.58.31.1 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h225 1:00:00
timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:00
timeout uauth 0:05:00 absolute
aaa-server TACACS+ protocol tacacs+
aaa-server RADIUS protocol radius
aaa-server LOCAL protocol local
http server enable
http 10.10.10.0 255.255.255.0 inside
no snmp-server location
no snmp-server contact
snmp-server community public
no snmp-server enable traps
tftp-server inside 10.10.10.1 cdisk
floodguard enable
telnet timeout 5
ssh timeout 5
console timeout 0
terminal width 80
Cryptochecksum:fefc4d657aaf2670de0537ea8b2400d4
: end
[OK]

 

[dopehead]

A few test that might lead you in the right direction :

From your workstation behind the pix do :

Ping

http://www.cisco.com

, do you get an ip address for it ? can you ping it ?

If you get an ip address you have a DNS server response, so that is fine, if not do a ipconfig /all and paste the putput to us so we can see how it is setup.

To webbrowse your way to a server directly on the outside segment you only need a nat/global statement and interfaces up. Do your serveres reside on the outside in the same ip range as your firewall ?

Jan

Network Systems Engineer
CCNA/CQS/CCSP

 

[dam9178]

FIRST HALF 'dopehead' reponse

From the workstation behind (inside of) the firewall, I do not get a ping response from anything besides the inside firewall interface.

Here is the ipconig from the workstation behind the firewall:

Windows IP Configuration
Host Name..............: OC3
Primary Dns Suffix.....:
Node Type..............: Hybrid
IP Routing Enabled.....: No
WINS Proxy Enabled.....: No

Ethernet Adapter Local Aerea Connection:

Connection-specific DNS Suffix...:
Description......................: Intel<R> PRO/1000 MTV
Physical Address.................: 00-0E-DB-C7-25-6A
Dhcp Enabled.....................: No
IP Address.......................: 10.10.10.10
Subnet Mask......................: 255.0.0.0
Default Gateway..................: 147.58.31.1
DNS Servers......................: 147.58.253.5
150.113.7.26
Primary WINS Server..............: 147.58.184.95
Secondary WINS Server............: 147.58.31.22


SECOND HALF 'dopehead' response

My servers on the outside are all on IP 147.58.31.x and the outside firewall IP is 147.58.31.4

 

[dopehead]

Wrong default gateway on your network card my friend. Should be in the range that your ip address is in, In your case it is the pix ie. 10.10.10.1

Jan

Network Systems Engineer
CCNA/CQS/CCSP

 

[dam9178]

Jan,

I have been working on this for 3 weeks.
I can not thank-you enough.

THANK-YOU, Thank-you, THANK_YOU!!!
Dwayne