Setting Up a Cisco Pix 520 Rev C0, ver 6.3 Unrestricted

[jhappy3]

Hello from Spokane,

I'm new to high-end (although old) firewalls. I purchased the firewall a couple days ago and have spent hours online collecting white papers, PDF files, etc on setting it up and configuring it. From the seller I receive a written copy of a report. Although I don't understand all of the report I can say it appears to show the version and the interfaces. Under the 'Interfaces' portion of the report the report states that ethernet1 (inside) is up, line protocol is up and the IP address is 192.168.0.64 and the subnet mask is 255.255.255.0.

My plan is to install the firewall just after my DSL modem and before my switches.

I did find a web page which stated that I should plug the modem into the firewall (interface #0 ??) and then plug the firewall (interface #1 ??) into my switch and then connect my PC to my switch. Seems simple, and to follow these instructions I must assume that since my DSL modem is not set up to do DHCP, that the PIX firewall will automatically start handing out ip addresses to the devices plugged into my switch. If I go ahead with these recommended installation steps, that leaves me wondering how to talk to the Pix firewall. Does it have a preconfigured (default) static IP address? Is it the IP address stated in the report I received from the previous owner for Interface ethernet 1 ("inside")? My servers and workstations are all Windows based. I have used RS232 terminals, telnet and just installed a trial version of SecureCRT. How do I open up a communications session with the PIX? How do I start talking to it, or it to me.

 

[Supergrrover]

Easiest is to use a serial cable to the pix console port. You can set everything you need from there

This is a start -

Minimum Base:

hostname [HOSTNAME]
domain-name [DOMAIN.com]

ip address inside [INTERNAL_IP] [INTERNAL_SUBNET]

global (outside) 1 interface
nat (inside) 1 0.0.0.0 0.0.0.0 0 0

route outside 0.0.0.0 0.0.0.0 [DEFAULT_GATEWAY] *** not needed if dhcp setroute option used

Static IP/DHCP:

ip address outside {[EXTERNAL_IP] [EXTERNAL_SUBNET] | dhcp setroute}


PPPoE Config:

vpdn group [GROUP_NAME] request dialout pppoe
vpdn group [GROUP_NAME] ppp authentication {PAP|CHAP|MSCHAP}
vpdn group [GROUP_NAME] localname username
vpdn [USERNAME] username password [PASSWORD] [store-local]

ip address outside pppoe [setroute] | ip address outside [EXTERNAL_IP] [EXTERNAL_SUBNET] pppoe


DHCP SERVER:

dhcpd address [INTERNAL_IP_START]-[INTERNAL_IP_END] inside
dhcpd dns [DNS_IP#1] [DNS_IP#2]
dhcpd wins [WINS_IP#1]
dhcpd lease 3600
dhcpd ping_timeout 750
dhcpd auto_config outside
dhcpd enable inside


SSH:
ca generate rsa key 1024 ***version 6x
ca save all ***version 6x
ssh 0.0.0.0 0.0.0.0 outside
ssh [INTERNAL_IP] [INTERNAL_SUBNET] inside
passwd [TELNET/SSH_PASSWORD]



Brent
Systems Engineer / Consultant
CCNP, CCSP