topic Re: PIX 501 and DSL connection in Network Security

PIX 501 and DSL connection

ullmann — Fri, 21 Feb 2020 07:40:49 GMT

Hello,

is it possible to configure the PIX 501 in that way:

Internal network (5 PCs) --- PIX ---DSL---Internet

I have seen the configuration procedure in http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/config/pixclnt.htm

but it is not clear to me how I should configure NAT (the IPs of the 5 PCs in the internal network need to be NATed to the automatically assigned IP address of the PPPoE client) and if I have to configure a static statement. How do I bring the DNS server information to the clients ? Is this automatically done when I start the DHCP server of the 501 ?

Thanks in advance!

Re: PIX 501 and DSL connection

laje — Wed, 13 Oct 2004 13:20:35 GMT

nat (inside) 1 0 0 (nating of all inside clients)

global (ouside) 1 interface (address translated to interface ip)

ip address outside dhcp setroute (sets the outside int to dhcp client and receives default route from outside)

ip address inside 192.168.1.x

dhcpd address 192.168.1.y-192.168.1.z

dhcpd lease xxxx

dhcpd ping timeout xxx

dhcpd auto config outside (this will supply dns info from outside to inside clients. NOT done automatically)

dhcpd enable inside (enables DHCP server on inside int)

These basics should get you going.

Cheers

Re: PIX 501 and DSL connection

lfabricio — Wed, 13 Oct 2004 13:28:11 GMT

This configuration is exactly what you will need. The NAT configuration is represent for 2 lines:

nat (inside) 10 *internal network* *internal mask*

(example (nat (inside) 10 60.0.0.0 255.255.255.0))

The hosts what be this network, will be translate by "Global" command that have the same index, the number 10 in this case:

Global (outside) 10 interface

In this case all hosts will be translated with interface ip, that in adsl connection in most of the cases is dynamic.

In DNS's case, the information is attribute for the clients by DHCP Server configuration in PIX, the line this configuration is:

dhcpd dns 209.165.201.2 209.165.202.129

The another lines for configuration of DHCP Server need be attribute too.

Thanks,

Sorry for my bad english.

Leandro.

Re: PIX 501 and DSL connection

Patrick Iseli — Wed, 13 Oct 2004 13:58:25 GMT

ip address outside pppoe setroute

ip address inside 192.168.1.1 255.255.255.0

global (outside) 1 interface

nat (inside) 1 192.168.1.0 255.255.255.0

vpdn group pppoex request dialout pppoe

vpdn group pppoex localname usernamePPOE

vpdn group pppoex ppp authentication pap

vpdn username usernamePPOE password yourPPOEpassword

dhcpd address 192.168.1.10-192.168.1.30 inside

dhcpd dns dnsIP1 dnsIP2

dhcpd lease 300

dhcpd ping_timeout 750

dhcpd domain yourdomain.com

dhcpd auto_config outside

dhcpd enable inside

Re: PIX 501 and DSL connection

ullmann — Wed, 13 Oct 2004 15:22:33 GMT

Many thanks to the quick replies. Next week I will try this configuration and see how it works.

Regards Stefan