PIX515 Configuration

[skialta]

I have a PIX515E that I want to update with the following config:
I have an FTP server that I want to put in the DMZ, how do I accomplish this? I have a range of public IPs that I can choose from and I have an entire class C DMZ address to choose from. What are the steps to complete the task? Since this is an FTP server, I obviously would like to limit traffic to the DMZ address only to Port 21 traffic only. Thanks for your help

 

[jaku00]

Why you don't use PDM? I think it’s much easier for first time users.

 

[skialta]

Okay, so what's PDM? How do you use it? etc. Thanks

 

[skialta]

Okay, I know what PDM is, however I have some questions.

I'm running Pix IOS 6.3 and it appears that PDM is part of the IOS. However, when I run config t, pdm location (and plug in the LAN IP address of the Pix, subnet and interface name I cannot connect to it. Yes I tried using https and not http.) Do I need to assign another IP address to the same ethernet connection for PDM purposes?

Any thoughts?

 

[colinT23]

Hi,

You access PDM from a browser, not from the console. Assuming your pix inside IP is 192.168.1.1, you'd enter '

https://192.168.1.1'

into Internet Explorer (or whatever browser you use) address bar from a workstation on the lan. This workstation needs to have java 2 runtime environment installed.

Regards Colin.

 

[lgarner]

On the Pix, the "http" directive determines which workstations can use PDM. "pdm location" is used internally by PDM and doesn't mean anything outside of it.

 

[skialta]

I have hit the Pix using it's internal IP address and nothing...I get a page cannot be displayed. I have the Jave JVM installed...

 

[colinT23]

Hi,

Can you post the config of the pix ? Take out any public IP's/passwords etc.

Regards Colin.