Help with setting up DMZ

Mark Bracking — Mon, 11 Mar 2019 18:39:00 GMT

I have Pix 515E that I need help setting up the DMZ. I want to accomplish two things first set up a DHCP server on the Pix for the DMZ and second be able to access the internet. At the present time I cannot do either and have not found the information that tells me how to accomplish these two objectives.

PIX# sh ver

Cisco PIX Firewall Version 6.3(1)
Cisco PIX Device Manager Version 3.0(0)141

Compiled on Wed 19-Mar-03 11:49 by morlee

PIX up 1 day 0 hours

Hardware: PIX-515E, 160 MB RAM, CPU Pentium II 433 MHz
Flash E28F128J3 @ 0x300, 16MB
BIOS Flash AM29F400B @ 0xfffd8000, 32KB

0: ethernet0: address is 000b.be3d.b341, irq 10
1: ethernet1: address is 000b.be3d.b342, irq 11
2: ethernet2: address is 0002.b3bb.d45c, irq 11
Licensed Features:
Failover:           Disabled
VPN-DES:            Enabled
VPN-3DES-AES:       Enabled
Maximum Interfaces: 3
Cut-through Proxy: Enabled
Guards:             Enabled
URL-filtering:      Enabled
Inside Hosts:       Unlimited
Throughput:         Unlimited
IKE peers:          Unlimited

This PIX has a Restricted (R) license.

PIX# show run
: Saved
:
PIX Version 6.3(1)
interface ethernet0 auto
interface ethernet1 auto
interface ethernet2 auto
nameif ethernet0 outside security0
nameif ethernet1 inside security100
nameif ethernet2 dmz security50
enable password XJX9T/MNG54uoaTm encrypted
passwd XJX9T/MNG54uoaTm encrypted
hostname PIX
fixup protocol ftp 21
fixup protocol h323 h225 1720
fixup protocol h323 ras 1718-1719
fixup protocol http 80
fixup protocol ils 389
fixup protocol rsh 514
fixup protocol rtsp 554
fixup protocol sip 5060
fixup protocol sip udp 5060
fixup protocol skinny 2000
fixup protocol smtp 25
fixup protocol sqlnet 1521
names
access-list outside_access_in permit icmp any any echo-reply
pager lines 24
mtu outside 1500
mtu inside 1500
mtu dmz 1500
ip address outside dhcp setroute
ip address inside 10.0.1.2 255.255.255.0
ip address dmz 172.16.2.1 255.255.255.0
ip audit info action alarm
ip audit attack action alarm
pdm history enable
arp timeout 14400
global (outside) 1 interface
nat (inside) 1 192.168.100.0 255.255.255.0 0 0
nat (inside) 1 0.0.0.0 0.0.0.0 0 0
access-group outside_access_in in interface outside
route dmz 192.168.42.0 255.255.255.0 192.168.1.5 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h225 1:00:00
timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:00
timeout uauth 0:05:00 absolute
aaa-server TACACS+ protocol tacacs+
aaa-server RADIUS protocol radius
aaa-server LOCAL protocol local
no snmp-server location
no snmp-server contact
snmp-server community public
no snmp-server enable traps
floodguard enable
telnet timeout 5
ssh timeout 5
console timeout 0
dhcpd address 10.0.1.100-10.0.1.108 inside
dhcpd dns 205.171.3.25 192.168.100.1
dhcpd wins 209.165.201.5
dhcpd lease 3600
dhcpd ping_timeout 750
dhcpd domain sbssrv.com
dhcpd enable inside
terminal width 80
banner login Enter your password to log in

thank you

Mark

Re: Help with setting up DMZ

Nagaraja Thanthry — Sat, 11 Sep 2010 22:50:24 GMT

Hello,

Please try the following:

dhcpd address 172.16.2.2-172.16.2.10 dmz

dhcpd dns 205.171.3.25 192.168.100.1

dhcpd wins 209.165.201.5

dhcpd lease 3600

dhcpd ping_timeout 750

dhcpd domain sbssrv.com

dhcpd enable dmz

nat (dmz) 1 0.0.0.0 0.0.0.0

Hope this helps.

Regards,

Re: Help with setting up DMZ

Mark Bracking — Sat, 11 Sep 2010 23:11:34 GMT

That fixed the problem thanks mark

topic Re: Help with setting up DMZ in Network Security

Help with setting up DMZ

Re: Help with setting up DMZ

Re: Help with setting up DMZ