cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
624
Views
0
Helpful
7
Replies

Configuring PIX 501 with a single internal network

lando0977
Level 1
Level 1

I have a PIX 501 i need to configure and need some help. The address of my inside netork is 192.168.0.0 and the outside will be 192.168.1.0. I have been able to assign ip address to the inside interface as 192.168.0.35 and the outside interface as 192.168.1.1. Now i have a pc with the address 192.168.1.26 on the outside which i need my users from the inside (192.168.0.0) to connect to. How do i need to configure nat and routes for this to be able to work. I'm new at this. Thanks!

7 Replies 7

Collin Clark
VIP Alumni
VIP Alumni

To enable NAT,

nat (inside) 1 0.0.0.0 0.0.0.0

global (outside) 1 interface

If you want to get beyond the 192.168.1.0 network you will need to know the gateway for that network. The route statement to add for example...

route outside 0.0.0.0 0.0.0.0 192.168.1.254

HTH and please rate.

I tried that and now i'm trying to ping a machine on the outside from the inside and can't do it. How can i fix this?

You need access-list on outside interface to allow icmp echo-reply.

access-list 101 permit icmp 192.168.1.0 255.255.255.0 192.168.0.0 255.255.255.0 echo-reply

access-group 101 in interface outside

I tried that and still get host unreachable, either way. Sorry but i'm new at this, what can i do now.

Post pix config

i've attached the pic cfg.

Do you have any access-list configure on Inside Interface..

I am not able to access your config...

CK

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card