Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

PIX 501 configuration

Hi - and thanks in advance for your help.

There's something I'm doing wrong with the basic configuration of this older PIX 501, and I don't know what it is...  It seems to me it should be working, and indeed it was working for a short while, and then stopped working inexplicably. 

Now I can't even ping any IP outside, not even the next hop --- and so I was hoping someone could look at the "show run" and tell me what the hell is missing before I rip my hair out.

Here's the show run, and thanks again for your help -

(PS1 - the real outside IP was replaced by A.B.C.D, and the next hop by A.B.C.E)

-------------------

PIX Version 6.3(5)

interface ethernet0 auto

interface ethernet1 100full

nameif ethernet0 outside security0

nameif ethernet1 inside security100

enable password 7qqHBeDL51oM/AKL encrypted

passwd 8WAU9VgeZbq1ZOeK encrypted

hostname fire

domain-name xxx.pri

fixup protocol dns maximum-length 512

fixup protocol ftp 21

fixup protocol h323 h225 1720

fixup protocol h323 ras 1718-1719

fixup protocol http 80

fixup protocol pptp 1723

fixup protocol rsh 514

fixup protocol rtsp 554

no fixup protocol sip 5060

no fixup protocol sip udp 5060

fixup protocol skinny 2000

fixup protocol smtp 25

fixup protocol sqlnet 1521

fixup protocol tftp 69

names

pager lines 24

mtu outside 1500

mtu inside 1500

ip address outside A.B.C.D 255.255.255.252

ip address inside 192.168.6.1 255.255.255.0

ip audit info action alarm

ip audit attack action alarm

pdm logging informational 100

pdm history enable

arp timeout 14400

global (outside) 1 interface

nat (inside) 1 0.0.0.0 0.0.0.0 0 0

static (inside,outside) A.B.C.D 192.168.6.9 netmask 255.255.255.255 0 0

conduit permit tcp host A.B.C.D eq pptp any

conduit permit icmp any any

route outside 0.0.0.0 0.0.0.0 A.B.C.E 1

timeout xlate 0:05:00

timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h225 1:00:00

timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:00

timeout sip-disconnect 0:02:00 sip-invite 0:03:00

timeout uauth 0:05:00 absolute

aaa-server TACACS+ protocol tacacs+

aaa-server TACACS+ max-failed-attempts 3

aaa-server TACACS+ deadtime 10

aaa-server RADIUS protocol radius

aaa-server RADIUS max-failed-attempts 3

aaa-server RADIUS deadtime 10

aaa-server LOCAL protocol local

no snmp-server location

no snmp-server contact

snmp-server community public

no snmp-server enable traps

floodguard enable

telnet 192.168.6.0 255.255.255.0 inside

telnet timeout 5

ssh timeout 5

console timeout 0

terminal width 80

banner exec Private Network - Buzz off!

banner login Private Network - No Access!

Cryptochecksum:488eebb0a68315fabc877297138c0e44

: end

fire#

Everyone's tags (4)
6 REPLIES
New Member

Re: PIX 501 configuration

Thank you for your question.  This community is for Cisco Small Business products and your question is in reference to a Cisco Elite/Classic product.  Please post your question in the Cisco NetPro forums located here:

- Security and Surveillance ----> Security Forum http://forum.cisco.com/eforum/servlet/NetProf;jsessionid=E0EEC3D9CB4E5165ED16933737822748.SJ3A?page=Security_discussion

  This forum has subject matter experts on Cisco Elite/Classic products that may be able to answer your question.

THANKS

New Member

Re: PIX 501 configuration

Thank you for your reply - I have looked at your link, which points here:

https://supportforums.cisco.com/index.jspa

...and wasn't sure of the exact forum you wanted me to post in:

1) I did not see a "Security & surveillance" forum, I saw a "security" forum - Is that what you mean?

2) The sub-division of the "security" forum do not seem to contain a "NetPro" forum or "Elite/Classic" listed -

I simply don't know where you are telling me I should be posting

Thanks for clarifying.

Cisco Employee

Re: PIX 501 configuration

Hello Philippe -- Try: https://supportforums.cisco.com/community/netpro/security/physical-security .

Thanks,

Stephanie Reaves

Cisco Small Business

New Member

Re: PIX 501 configuration

Thanks   And sorry for the mistake -

Cisco Employee

Re: PIX 501 configuration

No problem and no mistake. This is a LARGE community and the taxonomy isn't always simple. We hope you'll visit again soon with a post about a Small Business product!

Thank YOU for being a Cisco customer.

Stephanie Reaves

Cisco Small Business

Silver

Re: PIX 501 configuration

Hello,

I have moved this thread into the area that Stephanie suggested, https://supportforums.cisco.com/community/netpro/security/physical-security and here is the other post that Philippe started there: https://supportforums.cisco.com/message/3220759#3220759 posted there.

Regards,

Cindy Toy

Cisco Small Business

Community Manager

Regards, Cindy If my response answered your question, please mark the response as answered. Thank you!
1647
Views
0
Helpful
6
Replies
CreatePlease login to create content