PIX 501, and Cisco Client

[RJ45100BT]

Ok,

Pix 501, configured for remote connections with client.
Can establish connection to pix but cannot hit internal hosts.

This is in a lab so note the IP ANY ANY ACL's.

Config below.

PIX Version 6.1(4)
nameif ethernet0 outside security0
nameif ethernet1 inside security100
enable password *************** encrypted
passwd *************** encrypted
hostname Boston-Pix
domain-name chuckles
fixup protocol ftp 21
fixup protocol http 80
fixup protocol h323 1720
fixup protocol rsh 514
fixup protocol rtsp 554
fixup protocol smtp 25
fixup protocol sqlnet 1521
fixup protocol sip 5060
fixup protocol skinny 2000
names
access-list 101 permit ip 10.10.9.0 255.255.255.0 10.30.50.0 255.255.255.0
access-list 101 permit ip 10.10.9.0 255.255.255.0 10.30.60.0 255.255.255.0
access-list nonat permit ip 10.10.9.0 255.255.255.0 10.30.50.0 255.255.255.0
access-list nonat permit ip 10.10.9.0 255.255.255.0 10.30.60.0 255.255.255.0
access-list nonat permit ip 10.10.9.0 255.255.255.0 10.20.50.0 255.255.255.0
access-list nonat permit ip 10.10.9.0 255.255.255.0 10.20.60.0 255.255.255.0
access-list nonat permit ip 10.10.9.0 255.255.255.0 10.10.10.0 255.255.255.0
access-list nonat permit ip 10.10.9.0 255.255.255.0 10.10.99.0 255.255.255.0
access-list inside permit ip any any
access-list outside permit ip any any
access-list 102 permit ip 10.10.9.0 255.255.255.0 10.20.50.0 255.255.255.0
access-list 102 permit ip 10.10.9.0 255.255.255.0 10.20.60.0 255.255.255.0
access-list 103 permit ip 10.10.9.0 255.255.255.0 10.10.10.0 255.255.255.0
access-list 110 permit ip 10.10.9.0 255.255.255.0 any
pager lines 24
interface ethernet0 10baset
interface ethernet1 10full
mtu outside 1500
mtu inside 1500
ip address outside dhcp setroute
ip address inside 10.10.9.1 255.255.255.0
ip audit info action alarm
ip audit attack action alarm
ip local pool boston 10.10.99.1-10.10.99.10
pdm history enable
arp timeout 14400
global (outside) 1 interface
nat (inside) 0 access-list nonat
nat (inside) 1 0.0.0.0 0.0.0.0 0 0
access-group outside in interface outside
access-group inside in interface inside
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h323 0:05:00 sip 0:30:00 sip_media 0:02:00
timeout uauth 0:05:00 absolute
aaa-server TACACS+ protocol tacacs+
aaa-server RADIUS protocol radius
no snmp-server location
no snmp-server contact
snmp-server community public
no snmp-server enable traps
floodguard enable
sysopt connection permit-ipsec
no sysopt route dnat
crypto ipsec transform-set set1 esp-3des esp-sha-hmac
crypto dynamic-map dynamap 30 set transform-set set1
crypto map vpn 5 ipsec-isakmp
crypto map vpn 5 match address 101
crypto map vpn 5 set peer *.*.*.*
crypto map vpn 5 set transform-set set1
crypto map vpn 10 ipsec-isakmp
crypto map vpn 10 match address 102
crypto map vpn 10 set peer *.*.*.*
crypto map vpn 10 set transform-set set1
crypto map vpn 20 ipsec-isakmp dynamic dynamap
crypto map vpn interface outside
isakmp enable outside
isakmp key ******** address 216.*.*.*.*netmask 255.255.255.255 no-xauth no-config-mode
isakmp key ******** address 216.*.*.*. netmask 255.255.255.255 no-xauth no-config-mode
isakmp identity address
isakmp policy 5 authentication pre-share
isakmp policy 5 encryption 3des
isakmp policy 5 hash sha
isakmp policy 5 group 2
isakmp policy 5 lifetime 86400
vpngroup boston address-pool boston
vpngroup boston split-tunnel 110
vpngroup boston idle-time 1800
vpngroup boston password ********
telnet 0.0.0.0 0.0.0.0 outside
telnet timeout 5
ssh 0.0.0.0 0.0.0.0 outside
ssh timeout 5
dhcpd address 10.10.9.2-10.10.9.20 inside
dhcpd dns *.*.*.* *.*.*.*
dhcpd lease 3000
dhcpd ping_timeout 750
dhcpd enable inside

Boston-Pix(config)#

 

[yizhar]

HI.

Check the default gateway on internal hosts, or set an internal host with static route to 10.10.99.0 that will point to the pix.

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar

 

[HomeMIS]

I just got a PIX firewall 501. We are replacing one that a new tech fired. I can telnet in to it but I don't know the user name or password. It says to use the default user name and password? Can someone help me on this please?

HomeMIS