Pix Firewall

[kapupu]

I starting to learn about Pix Firewall & I have some issue with it that I need some advice. My Pix is version 6.1(1) The issue that I am having is that when I'm trying to type interface ethernet0 it still put me in global configuration mode. I could never get me into the interface configuration mode. Is there any reason why? Thank in advance.

 

[m4ilm4n]

PIX configs don't work the same as Cisco routers or switches, there really isn't a "interface config" level. If you're trying to set speed or duplex, for example, you'd do it all on one line:

int eth0 100full

You'd also apply a name to the interface:

nameif ethernet0 outside security0

then other statements would be applied using the name:

icmp permit any outside

 

[kapupu]

from configuration mode how do you enter interface mode then?

 

[m4ilm4n]

Perhaps I wasn't clear before - there isn't an "interface mode" when configuring a PIX.

 

[kapupu]

ok maybe there is not interface mode but what will this command do?

pixfirewall(config)#interface ethernet0

the result should be
pixfirewall(config-if)#

my pix return this pixfirewall(config)# which keep me in configuration mode?
how do you config an IP address for pix?

 

[m4ilm4n]

The command "int ethernet0" won't give you a "config-if" prompt; like I said, there isn't a config-if level in a PIX.

You'd assign a IP address like this:

nameif ethernet1 inside
ip address inside 192.168.1.1 255.255.255.0

Once you name an interface, you apply commands against the name, e.g.

"route outside 0.0.0.0 0.0.0.0 a.b.c.d 1"

(where a.b.c.d is the ip address of the outside interface's default gateway) creates a default route going outbound.

 

[unclerico]

this should be in the PIX forum

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)

 

[kapupu]

Thanks very much m4ilm4n.