Okay so I've looked over the config many times and I can't figure out what the problem is. I have 2 servers running behind the PIX (s1 - out 78.xxx.xxx.15 in 10.xxx.xxx.83 s2 - out 78.xxx.xxx.14 in 10.xxx.xxx.85). From server 1 I can VPN/RDP in, but I can not access the internet. From server 2 it is just the opposite, I can access the internet but I can not VPN in. Here is the config...
PIX Version 6.3(4)
interface ethernet0 100full
interface ethernet1 100full
nameif ethernet0 outside security0
nameif ethernet1 inside security100
fixup protocol dns maximum-length 512
fixup protocol ftp 21
fixup protocol h323 h225 1720
fixup protocol h323 ras 1718-1719
fixup protocol http 80
fixup protocol rsh 514
fixup protocol rtsp 554
fixup protocol sip 5060
fixup protocol sip udp 5060
fixup protocol skinny 2000
fixup protocol smtp 25
fixup protocol sqlnet 1521
fixup protocol tftp 69
object-group network pptp_servers
network-object host 78.xxx.xxx.15
network-object host 78.xxx.xxx.14
access-list inbound permit icmp any any
access-list inbound permit tcp any host 78.xxx.xxx.14 eq www
access-list inbound permit tcp any host 78.xxx.xxx.15 eq www
access-list inbound permit tcp any host 78.xxx.xxx.15 eq domain
access-list inbound permit udp any host 78.xxx.xxx.15 eq domain
access-list inbound permit tcp any host 78.xxx.xxx.15 eq pptp
access-list inbound permit tcp any host 78.xxx.xxx.14 eq pptp
access-list inbound deny ip any any log
access-list outbound permit icmp any any
access-list outbound permit ip 10.0.0.0 255.0.0.0 any
access-list outbound deny ip any any log
access-list acl_inbound permit tcp any object-group pptp_servers eq pptp
access-list acl_inbound permit gre any object-group pptp_servers
Just an update, I have fixed the VPN/RDP connection but server 1 still has no in internet access... Also I'm sure this isnt a hard fix but while I'm in RDP through the VPN I have no internet access on my local and remote machines. Any ideas?
Login to the FXOS chassis manager.
Direct your browser to https://hostname/, and log-in using the user-name and password.
Go to Help > About and check the current version:
Check the current version availa...
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...