topic Cisco 2600 Router and Cisco Pix 501 Firewall in Network Security

Cisco 2600 Router and Cisco Pix 501 Firewall

yslitineh — Fri, 21 Feb 2020 07:58:48 GMT

Hi!

I would very much appreciate your help with how to connect and configure a Cisco 2600 Router and Cisco Pix 501 Firewall. I am pretty new to this an would like to know whether to connect the T1 to firewall and the firewall to the router or the other way round.

Your help and suggectons are greatly appreciated.

Thanks!

Youssef

Re: Cisco 2600 Router and Cisco Pix 501 Firewall

scoclayton — Thu, 24 Feb 2005 16:10:29 GMT

The PIX does not support any other interfaces other than ethernet. So, if you need to terminate a T1 interface, you will need to terminate this on the 2600 and then connect the PIX in via ethernet. Presumably, your internal hosts would then be connected to the PIX. Something like this:

T1----2600----PIX----internal hosts

Does this make sense?

Scott

Re: Cisco 2600 Router and Cisco Pix 501 Firewall

gfuentes — Sat, 04 Sep 2010 18:51:59 GMT

I have the following setup.

cisco 2600 Ethernet0/0 to ISP, Ethernet0/1 192.168.0.1 that goes to my Pix 501 Outside interface 192.168.0.2 and the inside interface is 192.168.1.1.

All my internal user are conected to a switch which is connected to the Pix 501 and they all have internet access; However when I try to connect from anywhere to my webserver on port 80 it won't let me.

On the router I have the following:

ip nat inside source static tcp 192.168.0.200 80 PUBLICIP 80 extendable

on The Pix I have the following:

access-list outside_access_in permit tcp any host 192.168.0.200 eq www

static (inside,outside) 192.168.0.200 192.168.1.200 netmask 255.255.255.255 0 0

I think my problem is on the router not sending the request to the firewall, but it's just driving me nuts.

Any input will be greatly appreciated.

Re: Cisco 2600 Router and Cisco Pix 501 Firewall

Jennifer Halim — Sun, 05 Sep 2010 00:12:18 GMT

Please perform "clear xlate" and "clear arp" on the PIX, and also make sure that on the router ARP for 192.168.0.200 points towards the PIX outside interface MAC address.

Hope that helps.