Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

Internet Access, PIX firewall Catalyst 2960

Hello,

I had a question regarding a PIX 506e firewall and a Catalyst 2960 switch and setting up internet access. Everything worked fine before I decided to subnet the internal network, I had it set up so the internet can be used and RDP can be passed through the firewall, ever sense I decided to subnet the network, I can still get RDP to pass through the firewall but I can not connect to the internet inside the network. Any advice would be much appreciated, thanks in advance!

Greg LePage

5 REPLIES
New Member

Re: Internet Access, PIX firewall Catalyst 2960

Hi Greg-

It sounds like maybe you need an internal route on your PIX. How did you subnet, and what is the topology of your network?

Paul

New Member

Re: Internet Access, PIX firewall Catalyst 2960

Here is the scenario, I will try to describe it the best I can without confusing anyone. The current network I am building has been sub netted to the following;

Domain Controller 1: 192.168.7.5 / 255.255.255.240

Domain Controller 2: 192.168.7.6 / 255.255.255.240

Terminal Services 1: 192.168.7.7 / 255.255.255.240

Terminal Services 2: 192.168.7.2.8 / 255.255.255.240

Encrypted File System: 192.168.7.9 / 255.255.255.240

On the terminal services I am using both the NICs to segment the network, so therefore they use the IP/SUB 192.168.7.20 / 255.255.255.240 & .21

I set up the PIX firewall to allow RDP connections to both TS1 and TS2. Now the issue I am having, is before I sub netted the network I could get both RDP connections and internet connections inside the internal network, however after doing what I described above I can still RDP into the network from the outside, but I can?t use the internet while inside. It?s weird because as soon as I change the subnet back to 255.255.255.0 the internet works.

Sorry if this was confusing and thanks for your help!

-Greg LePage

Re: Internet Access, PIX firewall Catalyst 2960

are your newly created subnets properly nat-ted for outbound internet access in the firewall?

New Member

Re: Internet Access, PIX firewall Catalyst 2960

??? Could you please clarify ???

New Member

Re: Internet Access, PIX firewall Catalyst 2960

You would have:

global (outside) 1 interface

nat (inside) 1 192.168.7.0 255.255.255.240

If you have this already, please post a config if you can.

HTH,

p

313
Views
0
Helpful
5
Replies
CreatePlease to create content