topic PIX connectivity issue in Network Security

PIX connectivity issue

jackdangas — Fri, 21 Feb 2020 08:28:41 GMT

hi,

I try to configure pix firewall, without ipsec first, and i'm unable to ping from a-side to b-side:

172.20.101.x/32 <-> ping nok <-> 172.20.100.x/32.

172.20.101.x <-> ping nok <-> 10.144.32.X/21.

172.20.100.X <-> ping nok <-> 10.144.32.0/21.

Does someone have an idea ?

Jack

jackko — Fri, 21 Oct 2005 00:49:09 GMT

with pix 6.x, nat/global or static are essential.

on both pix, add the commands below:

global (outside) 1 interface

nat (inside) 1 0 0

with the nat/global statements above, pix will pat the interface ip to pix outside interface ip.

assuming you are setting this up for test, you may want to disable nat/pat. if so, instead of adding the commands above, apply the followings:

nat (inside) 0 0 0

jackko — Thu, 03 Nov 2005 10:42:26 GMT

just wondering how you go.

jackdangas — Thu, 03 Nov 2005 12:13:32 GMT

Hi,

Thank you for your advice; i had to put on both routers:

Static (inside,outside)

Nat (inside)

icmp permit any inside/outisde

It's ok now,

Thanks

Jack