Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Mike Lewis on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

PIX limiting internet connections

Status
Not open for further replies.

Amye63

MIS
Jun 4, 2003
18
US
We are using a PIX 501 and 515. Both boxes seem to limit the number of internal pcs that can access the Internet. Any suggestions?
 
What's the license type on them? The 501 is definitely limited, the 515 might not be.
 
I am not sure. Here is what the show ver says regarding the license.
Thanks for the quick response :)

Licensed Features:
Failover: Enabled
VPN-DES: Enabled
VPN-3DES: Disabled
Maximum Interfaces: 6
Cut-through Proxy: Enabled
Guards: Enabled
Websense: Enabled
Inside Hosts: Unlimited
Throughput: Unlimited
ISAKMP peers: Unlimited
 
Actually the 501 can run an unlimited licence too.

That show ver shows you've got an unlimited licence. Can you provide some more detail on what you mean by the boxes limit the number of internal pcs that can access the internet?

CCNA, CCSA, MCSE, Cisco Firewall specialist, VPN specialist, wannabe CCSP ;)
 
What I mean is when we try to access the Internet from more than 5 machines, the 6th machine can not access it.
 
Do you have a global address setup?

global (outside) 1 216.7.4.1 (substitute the ip for yours)
 
Replace your "global" and "nat" commands with these:

global (outside) 1 interface
nat (inside) 1 0 0

You probably won't need to change the "nat" command but this is what it should look like. This will configure port address translation, which you should not have a problem with too many hosts.

Garrett
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top