topic PIX 501>>> Linksys Problem in Network Security

PIX 501>>> Linksys Problem

bennieg — Fri, 21 Feb 2020 08:24:08 GMT

Hi All,

I have a PIX 501 firewall, which is connected to a Linksys WAG54G (as my ADSL modem)

I have been using the PIX before I moved location, and I want to keep it exactly the same, just with a new public IP Address. I have changed the configuration and I can't get the PIX to connect to the Linksys!!!

They are both in the same IP range, and if I plug my laptop into the Linksys, I can get out to the Internet. However, I cant ping the Linksys when I am telnetted into the PIX. Also, if I plug my laptop straight into the PIX, I cant ping that either

It seems my PIX is the problem, but I can't see where!

I have another PIX with the same Linksys on a different Internet connection, and this one works fine

Any ideas?

Re: PIX 501>>> Linksys Problem

jackko — Fri, 16 Sep 2005 15:31:09 GMT

post the config please

Re: PIX 501>>> Linksys Problem

bennieg — Mon, 19 Sep 2005 11:29:00 GMT

Config attached. Any help is appreciated!

Re: PIX 501>>> Linksys Problem

spremkumar — Mon, 19 Sep 2005 11:58:10 GMT

After seeing your config your outside port is marked as auto for both speed and duplex.

to isolate and to negate the probabilities involved in this problem would suggest to hardcode the speed and duplex as well in the first line to check up the communication after that.

regds

Re: PIX 501>>> Linksys Problem

bennieg — Mon, 19 Sep 2005 12:30:38 GMT

Hi there. I have changed it to 100/Full, and still no joy?

Thanks

Re: PIX 501>>> Linksys Problem

edward.huggins — Tue, 20 Sep 2005 14:34:02 GMT

Make sure that you DO NOT have the software firewall up on the Linksys. Not sure what your configuration is but mine was this:

Firewall to Linksys Router to ISP

Seems sequence number issues come up when you have firewalls back to back. Hope this helps.

Re: PIX 501>>> Linksys Problem

bennieg — Tue, 20 Sep 2005 16:11:43 GMT

thanks for that suggestion. I have checked, but the firewall is definately off. Is there anything else I can check?

Cheers

Re: PIX 501>>> Linksys Problem

Patrick Iseli — Tue, 20 Sep 2005 16:30:42 GMT

I guess this is because you have configured a public IP on the outside PIX interface. Do you really have a public IP range in the inside LAN on the Linksys router ?

Example:

Linksys outside 217.40.y.x 255.255.255.248

Linksys inside 192.168.1.1 255.255.255.0 (Private IP)

PIX outside 192.168.1.2 255.255.255.0 (Private IP)

PIX inside 172.16.x.y 255.255.255.0 (Another Private IP)

PIX default gateway is the Linksys IP = 192.168.1.1

Then for all the NAT setup you will need to NAT (Port forward) all the setting from the Linksys router to the PIX.

sincerely

Patrick

Re: PIX 501>>> Linksys Problem

johnroche_2 — Wed, 21 Sep 2005 21:50:05 GMT

Do you need to configure the linksys router as a transparent bridge.

If this is turned on the linksys will only handle dsl signalling.