Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

PIX connectivity issue

hi,

I try to configure pix firewall, without ipsec first, and i'm unable to ping from a-side to b-side:

172.20.101.x/32 <-> ping nok <-> 172.20.100.x/32.

172.20.101.x <-> ping nok <-> 10.144.32.X/21.

172.20.100.X <-> ping nok <-> 10.144.32.0/21.

Does someone have an idea ?

Jack

1 ACCEPTED SOLUTION

Accepted Solutions
Gold

Re: PIX connectivity issue

just wondering how you go.

3 REPLIES
Gold

Re: PIX connectivity issue

with pix 6.x, nat/global or static are essential.

on both pix, add the commands below:

global (outside) 1 interface

nat (inside) 1 0 0

with the nat/global statements above, pix will pat the interface ip to pix outside interface ip.

assuming you are setting this up for test, you may want to disable nat/pat. if so, instead of adding the commands above, apply the followings:

nat (inside) 0 0 0

Gold

Re: PIX connectivity issue

just wondering how you go.

New Member

Re: PIX connectivity issue

Hi,

Thank you for your advice; i had to put on both routers:

Static (inside,outside)

Nat (inside)

icmp permit any inside/outisde

It's ok now,

Thanks

Jack

99
Views
0
Helpful
3
Replies
CreatePlease to create content