Use PIX 501 to access internet, how to?

otnj2ee · ‎04-16-2007

I have this PIX501 box and this is what I want to do:

Outside: connect it to a DSL modem (yahoo/ATT SpeedStream 5100). Use DHCP

Inside: connect to one or two PCs. Use static IP. The PIX box's inside IP: 192.168.1.1

The Yahoo's DNS server IP: 192.168.0.1

Could anybody provide a script to make this happen, so that I can run it on the pix.

Long story, short, when first bought it, the Cisco provided some tech support, somehow, they make it working. Now I am out of the support. I made all the reasonable efforts, but still can not make it working (access to the internet), even after I reset it to the factory's default setting.

Thanks for any help.

Scott

scottmac · ‎04-16-2007

I have exactly that setup, including a PIX 501.

First, reset the PIX to factory default.

Your path of least resistance would be to connect everything to where it's supposed to be connected.

From one of the inside PCs, aim a web browser at the PIX (You should have gotten a DHCP address from the PIX, the inside is a DHCP server by default). If you do an "IPCONFIG / ALL" on the PC from a DOS box, the address listed as "Default Gateway" is the address of the inside interface of the PIX.

Using your browser should bring up "PDM" (PIX device Manager). The default username and password is cisco/Cisco (note the capital "C")

Once you get PDM up, all you really need to do is configure the outside interface as PPPoE, and provide the Yahoo username & password (usually the same as your Yahoo email password). If you don't recall your username & password, go to the http://help.sbcglobal.com website and do an automated password reset

*** NOTE *** THIS WILL CHANGE THE PASSWORD OF EVERY SERVICE YOU ACCESS - EMAIL, ACCOUNT ACCESS, EVERYTHING!!!!!!!!!

Don't forget to save the config once you get it working.

By default, the PIX 501 is set up to be a DHCP client on the WAN interface, a DHCP server on the inside, and to pass the WAN parameters for DNS, Default Gateway, etc to the inside clients.

Once you've got the Outside interface correctly config'd for PPPoE, it should come up & be working.

Good Luck

Scott

otnj2ee · ‎04-19-2007

I tried. But it does not work.

1) I set modem to Bridge mode.

2) I tried either set inside use DHCP or

set the PC as static:

IP: 192.168.1.2

mask: 255.255.255.0

default gateway: 192.168.1.1 (the pix501)

DNS Server:75.25.6.31 (does not work)

also tried: 192.168.0.1 (DSL Modem's IP)

Neither worked.

PIX PDM:

Reset to factory default

Outside set to: PPPoE

leave IP and Mask blank

default gateway: I tried the followng separately:

leave blank or

75.25.6.31 (DSL's default gateway) or

192.169.0.1 (DSL modem's IP)

neither worked.

PPPoE user name password provided as they should be

Restart modem, PIX, computer.

Nothing worked.

Any clue?

Thanks to help.

Scott

Also, when set inside use the DHCP, what should be the:

DNS Server

Domain Name:

WINS Server

(I tried the ISP's DNS Server IP, my computer and Pix's domain name, and leave WINS Server blank. None worked)

miguel.celis · ‎04-20-2007

Hello Scott,

I have a DSL connection, and my DSL modem is set to bridge mode.

This is the config that I'm using with my pix 501. It works for me.

Here is a script, so you have to use the PIX Command Line Interface.

Also, I added the dhcp configuration if you want to enable DHCP daemon on your 501 for using it for the inside hosts.

Capital words are "variables", so you have to change it for real values.

---------------------------------------------------------------------------

vpdn group DSL_NAME request dialout pppoe

vpdn group DSL_NAME localname DSL_USERNAME

vpdn group DSL_NAME ppp authentication pap

vpdn username YOUR_DSL_USERNAME password YOUR_DSL_PASSWORD

ip address outside pppoe setroute

ip address inside INSIDE_IP_ADDRESS SUBNET_MASK

global (outside) 1 interface

nat (inside) 1 0.0.0.0 0.0.0.0 0 0

dhcpd address 10.250.250.10-10.250.250.40 inside ===> DHCP range of addresses

dhcpd dns DNS_IP_ADDRESS

dhcpd wins WINS_IP_ADDRES ===> optional

dhcpd lease 86400 ===> optional

dhcpd ping_timeout 1000 ===> optional

dhcpd domain YOUR_DOMAIN.WHAT_YOU_WANT ===> optional

dhcpd enable inside

-----------------------------------------------------------------------------

Hope this works for you