setup dsl modem/router to work with pix 515e firewall 2

[winetech]

I recieved my new business dsl modem netopia and
private "public" static ips came with modem

Question is how do I configure so this will work with my pix 515e. Want to keep my LAN secure. My LAN has all "private" ip's.

The dsl modem/router is also wireless so would like to use as guest access which will assign guest non private ip's to avoid connecting to my private LAN.

 

[Supergrrover]

Here is a starting point

hostname [HOSTNAME]
domain-name [DOMAIN.com]

ip address inside [INTERNAL_IP] [INTERNAL_SUBNET]

global (outside) 1 interface
nat (inside) 1 0.0.0.0 0.0.0.0 0 0

route outside 0.0.0.0 0.0.0.0 [DEFAULT_GATEWAY]

Static IP:

ip address outside [EXTERNAL_IP] [EXTERNAL_SUBNET]

DHCP SERVER:

dhcpd address [INTERNAL_IP_START]-[INTERNAL_IP_END] inside
dhcpd dns [DNS_IP#1] [DNS_IP#2]
dhcpd wins [WINS_IP#1]
dhcpd lease 3600
dhcpd ping_timeout 750
dhcpd auto_config outside
dhcpd enable inside

Anything in brackets you must replace with your info.




Brent
Systems Engineer / Consultant
CCNP, CCSP

 

[winetech]

Thanks for the assistance

I am learning the code part, but can you summarize what exactly its doing to get this to work. Will one of the DSL routers static ip be programmed into the pix so the remaining static ip's of the dsl router can be leased out to the wireless guest.

 

[mofusjtf]

The easiest way is to set the DSL modem to bridge mode and have your PIX do the PPPoE and static IP.

 

[winetech]

Thanks I got the pix configured now with the dsl router as a firewall to our LAN.

I used one of the static ip's of the dsl router for the outside address programmed into the pix configuration.

Now their are 4 static ip's left.

How can I setup the same dsl modem for Guest wireless access.

I tried to connected using my laptop but I get a limited or no connectivity error.

 

[Supergrrover]

What is the topology here? Is it
Internet - DSL Router - Pix - Inside?



Brent
Systems Engineer / Consultant
CCNP, CCSP

 

[winetech]

Hi Supergrrover
yes that is the correct topology we have.

 

[Supergrrover]

If the DSL router is wireless, then it should be able to hand out the remaining public addresses or do DHCP with private natted addresses. YOu will have to go into the router and see what services/options it offers.


Brent
Systems Engineer / Consultant
CCNP, CCSP