I am Ms Lim From Fung Keong Rubber Mfy (M) S/B, Klang, Selangor, Malaysia . I have a unit of firewall (pix506). And i m using dynamic ip (PPPoE) for outside Ip. All this whiles, (for last 4 years) it's run OK. But somewhere in begining of dec2009. The firewall cannot connet to internet. So What I have to do i have to by pass cisco firewall. And I did ask my supplier (i.e. Alphamatic) the engineers says that it may be because of Telekom change the setting. that's why this firewall cannot use for dynamic ip address already . (Means I have to apply for fixed IP line from Telekom Malysia) which is quite costly.
my question is :
1. Is it thru this firewall cannot be used for dynamic ip already?
2. If can, how to configure the setting?
I Hope Cisco personnel will assist me on this issue.
Your helpfulness i m highly appreciated.
Hope to hear ffrom you soon
Along with getting an IP address dynamically your ISP must be providing your PIX with a default route to go to inetrnet, as long as your outside interface of pix is properly confgiured to obtain a default route.
Please configure outside ifc with keyword "setroute" :
ip address x.x.x.x pppoe setroute
Now you can check on PIX if it is getting a route or not by doing show route statement.
Also, we need to check several things like, is how are your PIX going to internet (using a router or modem) ? Is the modem in bridged or routed mode ? Is the router doing any kind of NAT ?
Also as a good troubleshooting step you can disconnect the firewall (at off hours) and try to connect a PC to outside MODEM , and check if that gets an IP address. If it doesnot then their is something wrong with your ISP.
Can't you take the IP address that the PIX506 had prior to breaking and use the same IP address and configure it manually?
You can also enable PPPoE by manually entering the IP address, using the ip address if_name ip_address netmask pppoe command. This command sets the PIX Firewall to use the specified address instead of negotiating with the PPPoE server to assign an address.