Connecting PIX 520 to ADSL Alcatel Router 510i

[fcatalao]

I have an ADSL Alcatel Router 510i which is connected to the internet. Its working. When I insert the PIX520 in the middle, I cannot connect to the internet. My PIX configuration is simple. The Aclatel takes care of NAT.

here is my configuration:

access-list 100 permit icmp any any echo-reply

access-list 100 permit icmp any any time-exceeded

access-list 100 permit icmp any any unreachable

interface ethernet0 auto

interface ethernet1 auto

ip address outside x.x.x.1 255.255.255.0

ip address inside y.y.y.251 255.255.255.0

nat (inside) 1 y.y.y.0 255.0.0.0 0 0

access-group 100 in interface outside

route outside 0.0.0.0 0.0.0.0 x.x.x.2 1

[jmia]

Hola Fernando --

Try disabling NAT on you Alcatel Router and let the PIX handle NAT'ing for you and see what happens,

As a suggestion here are the six basic steps to get PIX up and running:

1 - nameif ethernet0 outside security0

nameif ethernet1 inside security100

2 - interface ethernet0 100full

interface ethernet1 100full

3 - ip address outside 192.168.1.2 255.255.255.0

ip address inside 10.0.1.1 255.255.255.0

4 - global (outside) 1 192.168.1.10 – 192.168.1.254 netmask 255.255.255.0

5 - nat (inside) 1 0.0.0.0 0.0.0.0 0 0

6 - route outside 0.0.0.0 0.0.0.0 192.168.1.1 1--->this is the metric for the next hop router

The IP addresses above are all for example only.

Hope this helps --

[fcatalao]

Hi,

First of all thank you. I tried exactl what you suggested (incl deisabling NAT on Alcatel) and still could not get it to work.

The only difference in my configuration was that I omitted the global outside command.

any other ideas?

thanks

[jmia]

Hi --

OK, that didn't help.. Mmm, Will it be possible for you to either pate your config of the Alcatel and also the config for the PIX. If you like you can e-mail it to me, that is if don't want to post it on this forum.

Please make sure that you exclude any 'real' IP addresses and passwords etc.

Thanks --