topic Re: PIX501: Internet access issue in Network Security

PIX501: Internet access issue

peperg — Mon, 11 Mar 2019 08:57:40 GMT

I am having an issue with a new (to me) 501. I have it between a 1721 connected to the Net and a 2621 doing internal intervlan routing. I can get to the web from the PIX (how I am writing this) but I am not able to get from the internal network to the Web. I am however able to get from the internal network to the PIX and the the opposite.

Any help would be greatly apreciated so the user types stop complaining they cant play bejewled online

Peper

Re: PIX501: Internet access issue

a.kiprawih — Fri, 17 Nov 2006 20:12:38 GMT

Your setup is like:

internet <--> C1721 router <--> PIX <--> C2621

Check your routing in PIX.

Your Inside interface IP is 10.2.1.2:

ip address inside 10.2.1.2 255.255.255.248

For internal segment hosted by/behind C2621 router (i.e 10.1.1.0/24), routing on PIX should point to the C2621 FastEthernet facong PIX inside interface, example if C2621 FastEthernet IP is 10.2.1.1, then routing on PIX should point to this IP, instead of PIX's own Inside interface IP:

Current route statement on PIX is:

route inside 10.1.1.0 255.255.255.0 10.2.1.2 1

route inside Admin 255.255.255.0 10.2.1.2 1

route inside Workstations325 255.255.255.0 10.2.1.2 1

route inside Printers 255.255.255.0 10.2.1.2 1

route inside Workstations340 255.255.255.0 10.2.1.2 1

route inside Workstations345 255.255.255.0 10.2.1.2 1

route inside Voice 255.255.255.0 10.2.1.2 1

Replace the '10.2.1.2' with C2621 FastEthernet IP facing PIX inside interface. Make sure on C2621, you have default route to PIX inside interface IP:

ip route 0.0.0.0 0.0.0.0 10.2.1.2

Hope this helps. Pls rate all useful post(s).

Re: PIX501: Internet access issue

peperg — Fri, 17 Nov 2006 21:08:45 GMT

K, yes it is Inet<-->1721<-->PIX501<-->2621. I did see the issue with the 10.2.1.2 on the PIX but it is still having the same results. I did verify the dg on the router as 10.2.1.2. I cold not be more frustrated with this thing at the moment.

Re: PIX501: Internet access issue

peperg — Fri, 17 Nov 2006 21:40:58 GMT

So I just cleared and rebuilt all the configs and shut it all down and brought it all back up and it works now!!!!!! I thank you for your help. If you reply back to me again I will mark it are resolved, I forgot to check the box in my glee

Re: PIX501: Internet access issue

a.kiprawih — Sat, 18 Nov 2006 00:11:42 GMT

Glad to heard that. But this things happened where you ned to either erase/delete the entry, have to completely reboot it after the change or erase everyhing & rebuilt the config.

Typically, erasing the unwanted lines & cleared the xlate is sufficient.

HTH