PIX 501 and Internet Access

otnj2ee · ‎04-02-2007

My network is very simple, like this: A DSL Modem is connected to a Cisco PIX 501 firewall/router, and a computer is connected to this firewall.

Now this PIX 501 box has two interfaces: Inside (192.168.1.1) and the netwroked PC (192.168.1.2). The outside interface is set to DHCP to be dynamically assigned an IP by the ISP's DNS server (192.168.0.1).

My networked PC (running Windows XP) is configured with an static IP (192.168.1.2), default Gateway (192.168.1.1 which is the PIX 501), and the DNS IP (192.168.0.1 which is the ISP's DNS Server).

But I can NOT access the internet. I can Ping 192.168.1.1 (the inside interface) but not the outside (192.168.0.1).

What am I missing and what should I do?

Thanks

Scott

m-haddad · ‎04-02-2007

Did you configure nat on the PIX?

You need to add the below:

Global (outside) 1 interface

nat (inside) 1 192.168.1.0 255.255.255.0

Remark: Try to use a public DNS such as 62.84.64.3

Let me know if this solves your issue,

Appreciate your rating,

Regards,

jmistich · ‎04-02-2007

Scott,

You will have to setup NAT so that all packets going from inside to outside get translated.

John

CCIE 7536