Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

PIX501: Internet access issue

I am having an issue with a new (to me) 501. I have it between a 1721 connected to the Net and a 2621 doing internal intervlan routing. I can get to the web from the PIX (how I am writing this) but I am not able to get from the internal network to the Web. I am however able to get from the internal network to the PIX and the the opposite.

Any help would be greatly apreciated so the user types stop complaining they cant play bejewled online

Peper

1 ACCEPTED SOLUTION

Accepted Solutions

Re: PIX501: Internet access issue

Glad to heard that. But this things happened where you ned to either erase/delete the entry, have to completely reboot it after the change or erase everyhing & rebuilt the config.

Typically, erasing the unwanted lines & cleared the xlate is sufficient.

HTH

AK

4 REPLIES

Re: PIX501: Internet access issue

Your setup is like:

internet <--> C1721 router <--> PIX <--> C2621

Check your routing in PIX.

Your Inside interface IP is 10.2.1.2:

ip address inside 10.2.1.2 255.255.255.248

For internal segment hosted by/behind C2621 router (i.e 10.1.1.0/24), routing on PIX should point to the C2621 FastEthernet facong PIX inside interface, example if C2621 FastEthernet IP is 10.2.1.1, then routing on PIX should point to this IP, instead of PIX's own Inside interface IP:

Current route statement on PIX is:

route inside 10.1.1.0 255.255.255.0 10.2.1.2 1

route inside Admin 255.255.255.0 10.2.1.2 1

route inside Workstations325 255.255.255.0 10.2.1.2 1

route inside Printers 255.255.255.0 10.2.1.2 1

route inside Workstations340 255.255.255.0 10.2.1.2 1

route inside Workstations345 255.255.255.0 10.2.1.2 1

route inside Voice 255.255.255.0 10.2.1.2 1

Replace the '10.2.1.2' with C2621 FastEthernet IP facing PIX inside interface. Make sure on C2621, you have default route to PIX inside interface IP:

ip route 0.0.0.0 0.0.0.0 10.2.1.2

Hope this helps. Pls rate all useful post(s).

AK

New Member

Re: PIX501: Internet access issue

K, yes it is Inet<-->1721<-->PIX501<-->2621. I did see the issue with the 10.2.1.2 on the PIX but it is still having the same results. I did verify the dg on the router as 10.2.1.2. I cold not be more frustrated with this thing at the moment.

New Member

Re: PIX501: Internet access issue

So I just cleared and rebuilt all the configs and shut it all down and brought it all back up and it works now!!!!!! I thank you for your help. If you reply back to me again I will mark it are resolved, I forgot to check the box in my glee

Re: PIX501: Internet access issue

Glad to heard that. But this things happened where you ned to either erase/delete the entry, have to completely reboot it after the change or erase everyhing & rebuilt the config.

Typically, erasing the unwanted lines & cleared the xlate is sufficient.

HTH

AK

243
Views
4
Helpful
4
Replies
CreatePlease to create content