PIX501 Remote Access ??

[jim2976]

I recently obtained a PIX 501 Firewall which I would like to access remotely. I'm not able to utilise Telnet over the Internet from the outside just yet, which would be ideal. Is it possible to access the console port of the PIX via a dialin modem like on routers? I have a US Robotics 56K modem (model 5668), and would like to set it up for use with the PIX. Should the config of the PIX be altered, or is it the modem config that has to be changed? Would appreciate anybody that can point me in the right direction, or put me out of my misery. I've spent several days trying to make it work...
Thanks
Jim

 

[Factor42]

It's possible to contact/communicate with your PIX via modem if you have your modem connected to a normal RAS service on your LAN.
Once connected, if you can ping other machines on your network, you should in theory be able to contact your PIX using Telnet also.
As long as the IP address you are given in RAS is the same subnet as your LAN then you shouldn't have a problem.
Any other subnet would mean you would have to tell your PIX where to go when replying to your requests, i.e;

(config)#route inside <your-Ras-subnet> <your ras submask> <your-RAS-server-ip> 1

See how you get on.

All the best

 

[jim2976]

Thanks very much, I'll give it a go.

Jim

 

[yizhar]

HI.

You can use SSH over the Internet.
If you have a fix ip address or range on the remote location, then you can limit SSH access only to that address.

At the pix, type:
ca generate rsa key 1024
ca save all
ssh a.b.c.d 255.255.255.255 outside

Bye

Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar

 

[jim2976]

Ref SSH, it works fine. Thanks very much.
Regards
Jim