Cisco Support Community
Community Member

How do I enter a static IP Address into a PIX 501

Currently I have a DSL line into DSL modem into PIX 501. Sharing Internet it all works super. Currently it is dynamic and gets an IP address that changes. This week I will receive a static IP address. Enclosed is my current PIX listing. For Example Only, say I receive address ( 567.567.567.567 ). Please tell me what instructions in the PIX will I have to change. Thank you very much in advance.


pixfirewall(config)# sh run

: Saved


PIX Version 6.3(1)

interface ethernet0 auto

interface ethernet1 100full

nameif ethernet0 outside security0

nameif ethernet1 inside security100

enable password -(data replaced)- encrypted

passwd -(data replaced)- encrypted

hostname pixfirewall


fixup protocol ftp 21

fixup protocol h323 h225 1720

fixup protocol h323 ras 1718-1719

fixup protocol http 80

fixup protocol ils 389

fixup protocol rsh 514

fixup protocol rtsp 554

fixup protocol sip 5060

fixup protocol sip udp 5060

fixup protocol skinny 2000

fixup protocol smtp 25

fixup protocol sqlnet 1521


pager lines 24

icmp permit any unreachable outside

mtu outside 1492

mtu inside 1492

ip address outside pppoe setroute

ip address inside

ip audit info action alarm

ip audit attack action alarm

pdm logging informational 100

pdm history enable

arp timeout 14400

global (outside) 1 interface

nat (inside) 1 0 0

timeout xlate 0:05:00

timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h225 1:00:00

timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:00

timeout uauth 0:05:00 absolute

aaa-server TACACS+ protocol tacacs+

aaa-server RADIUS protocol radius

aaa-server LOCAL protocol local

http server enable

http inside

no snmp-server location

no snmp-server contact

snmp-server community public

no snmp-server enable traps

floodguard enable

telnet timeout 5

ssh timeout 5

console timeout 0

vpdn group pppoe_group request dialout pppoe

vpdn group pppoe_group localname -(data replaced)-

vpdn group pppoe_group ppp authentication pap

vpdn username -(data replaced)- password -(data replaced)-

dhcpd address inside

dhcpd lease 3600

dhcpd ping_timeout 750

dhcpd auto_config outside

dhcpd enable inside

terminal width 80

Cryptochecksum:-(data replaced)-

: end




Re: How do I enter a static IP Address into a PIX 501

get into configure mode:

conf t

no ip address outside pppoe setroute

ip address outside x.x.x.x

you will also need to add a default route statement:

route outside

your isp should tell you what the default gateway ip is for the static ip they assign you

Community Member

Re: How do I enter a static IP Address into a PIX 501

Mostiguy Thank you very much for the reply. I really appreciate it.

Community Member

Re: How do I enter a static IP Address into a PIX 501

mostiguy. Today I received my Static IP Address. I did exactly as stated above. In my WinXP network connections, I set the receive IP automatically to the (3) settings I received IP,

subnet mask, and gateway. And via telenet, I changed all the settings as described above, and could not connect at all. Finally, I reset all items in WinXP & PIX, and could not even get back on line until I teleneted into PIX, saw monitor, did a reload on the PIX, then all started working as before the Static IP change. Any other item that I need to reset or do, or any special sequence to any WinXP & PIX changes. Thanks again for all your help.

Community Member

Re: How do I enter a static IP Address into a PIX 501

Today I received a letter containing my static ip addresses. After trying the above, I finally called my ISP and was told that the IP Address assigned to me was not scheduled to be activated until March 25, 2004. I will try again then. Thanks again for all help.

Community Member

Re: How do I enter a static IP Address into a PIX 501


I have spent half a day getting static IP address to work, and now I have it only working on one machine. I really need to have my wife's machine working before I get sent early to that giant PIX in the sky. My WinXP is working, the other machine which is a Win98 doesn't see the PIX at all. Can't ping etc. I have tried almost everything humanly possible. Before I received the static IP, both machines were flawless thru the PIX, now I can only see one of them. Please help. I will try any suggestions at all. The cisco tech had me delete all the vpdn and all dhcpd items in my config, and with the exception of the above stated two lines, the list is the same. Thanks in advance.

Community Member

Re: How do I enter a static IP Address into a PIX 501

Finally, every thing is working correctly. Thank everyone for your help.

CreatePlease to create content