I have here a PIX515, we use the ADSL Internet access, provided by a telecommunications ip prawn we ask, how to cultivate, I have not succeed soon !!!!!!!!!!! Telecom to the ip only one 218.95.248.251
Gateway is 218.95.248.1
Mask is 255.255.255.0
Please prawn were given instructions, first of all, I would like to thank the !!!!!!!!!!!!!
Global (outside) 1 interface Senat (inside) 1 0.0.0.0 0.0.0.0
218.95.248.1 route outside 0.0.0.0 0.0.0.0
Saved : :
PIX Version 6.1 (4)
Nameif ethernet0 outside security0
Nameif ethernet1 inside security100
Enable password 8Ry2YjIyt7RRXU24 encrypted
Passwd 2KFQnbNIdI.2KYOU encrypted
Hostname pixfirewall
Fixup protocol ftp 21
Fixup protocol http 80
Fixup protocol h323 1720
514 fixup protocol rsh
554 fixup protocol rtsp
Fixup protocol SMTP 25
Fixup protocol sqlnet 1521
Fixup protocol sip 5060
Fixup protocol skinny 2000
Names
Average power lines 24
Interface ethernet0 auto shutdown
Interface ethernet1 auto shutdown
Mtu outside 1500
Mtu inside 1500
255.255.255.0 ip address outside 218.95.248.251
Ip address 192.168.1.1 255.255.255.0 inside
Ip audit www.info.gov.hk action alarm
Ip audit attack action alarm
No failover
Failover timeout 0:00:00
Failover poll 15
Failover ip address outside 0.0.0.0
Failover ip address inside 0.0.0.0
Pdm history enable
Arp timeout 14400
Global (outside) 1 interface
Senat (inside) 1 0 0 0.0.0.0 0.0.0.0
218.95.248.1 route outside 0.0.0.0 0.0.0.0 1
Timeout xlate 3:00:00
Half-closed timeout conn 1:00:00 0:10:00 0:02:00 rpc 0:10:00 h323 0:05:00 si udp
P 0:02:00 0:30:00 sip_media
0:05:00 absolute timeout uauth
Aaa-server TACACS + protocol tacacs+
RADIUS protocol radius aaa-server
No snmp-server location
No contact snmp-server
Snmp-server community public
No snmp-server enable traps
Floodguard enable
No sysopt route dnat
Telnet timeout 5
Ssh timeout 5
Terminal width 80
Cryptochecksum:d41d8cd98f00b204e9800998ecf8427e
: End
Posted trouble. I can.
You see this work? Saved :
:
PIX Version 6.1 (4)
Nameif ethernet0 outside security0
Nameif ethernet1 inside security100
Enable password 8Ry2YjIyt7RRXU24 encrypted
Passwd 2KFQnbNIdI.2KYOU encrypted
Hostname pixfirewall
Fixup protocol ftp 21
Fixup protocol http 80
Fixup protocol h323 1720
514 fixup protocol rsh
554 fixup protocol rtsp
Fixup protocol SMTP 25
Fixup protocol sqlnet 1521
Fixup protocol sip 5060
Fixup protocol skinny 2000
Names
Average power lines 24
Interface ethernet0 auto shutdown
Interface ethernet1 auto shutdown
Mtu outside 1500
Mtu inside 1500
255.255.255.0 ip address outside 218.95.248.251
Ip address 192.168.1.1 255.255.255.0 inside
Ip audit www.info.gov.hk action alarm
Ip audit attack action alarm
No failover
Failover timeout 0:00:00
Failover poll 15
Failover ip address outside 0.0.0.0
Failover ip address inside 0.0.0.0
Pdm history enable
Arp timeout 14400
Global (outside) 1 interface
Senat (inside) 1 0 0 0.0.0.0 0.0.0.0
218.95.248.1 route outside 0.0.0.0 0.0.0.0 1
Timeout xlate 3:00:00
Half-closed timeout conn 1:00:00 0:10:00 0:02:00 rpc 0:10:00 h323 0:05:00 si udp
P 0:02:00 0:30:00 sip_media
0:05:00 absolute timeout uauth
Aaa-server TACACS + protocol tacacs+
RADIUS protocol radius aaa-server
No snmp-server location
No contact snmp-server
Snmp-server community public
No snmp-server enable traps
Floodguard enable
No sysopt route dnat
Telnet timeout 5
Ssh timeout 5
Terminal width 80
Cryptochecksum:d41d8cd98f00b204e9800998ecf8427e
: End
I used pix515e brother of a 515e Firewall configuration, the network is structured as follows : adsl-----pix515e------- telecommunications switches : As I address only to a configuration as follows : Saved :
:
PIX Version 6.1 (4)
Nameif ethernet0 outside security0
Nameif ethernet1 inside security100
Enable password 8Ry2YjIyt7RRXU24 encrypted
Passwd 2KFQnbNIdI.2KYOU encrypted
Hostname pixfirewall
Fixup protocol ftp 21
Fixup protocol http 80
Fixup protocol h323 1720
514 fixup protocol rsh
554 fixup protocol rtsp
Fixup protocol SMTP 25
Fixup protocol sqlnet 1521
Fixup protocol sip 5060
Fixup protocol skinny 2000
Names
Average power lines 24
Auto interface ethernet0
Auto interface ethernet1
Mtu outside 1500
Mtu inside 1500
255.255.255.0 ip address outside 218.95.248.251
Ip address 192.168.1.1 255.255.255.0 inside
Ip audit www.info.gov.hk action alarm
Ip audit attack action alarm
No failover
Failover timeout 0:00:00
Failover poll 15
Failover ip address outside 0.0.0.0
Failover ip address inside 0.0.0.0
Pdm history enable
Arp timeout 14400
Global (outside) 1 interface
Senat (inside) 1 0 0 0.0.0.0 0.0.0.0
218.95.248.1 route outside 0.0.0.0 0.0.0.0 1
Timeout xlate 3:00:00
Half-closed timeout conn 1:00:00 0:10:00 0:02:00 rpc 0:10:00 h323 0:05:00 si udp
P 0:02:00 0:30:00 sip_media
0:05:00 absolute timeout uauth
Aaa-server TACACS + protocol tacacs+
RADIUS protocol radius aaa-server
No snmp-server location
No contact snmp-server
Snmp-server community public
No snmp-server enable traps
Floodguard enable
No sysopt route dnat
Telnet timeout 5
Ssh timeout 5
Terminal width 80
Cryptochecksum:d41d8cd98f00b204e9800998ecf8427e
: End
But none of the other networks were not the loom network prawn ask you, why do it?
Firewall and switches connect with one mouth I connect with adsl is 0, then the other loom switchboard, how do you Boss Layer 3 Switch? Switch IP route inside 192.168.1.0 255.255.255.0.
Layer Switch Switch ip address which is a bargain Get? Yet! You wait a little while Qq? Locate ZP is not ADSL users? If I received directly ADSL猫 Ethernet on the PC can be connected? I can loom within the LAN and E1 links? In firewall (using CONSOLE) can PING通 outside the net?