topic Re: PIX 501 & Roadrunner cable modems in Network Security

PIX 501 & Roadrunner cable modems

doug.porter — Fri, 21 Feb 2020 06:27:53 GMT

I'm trying to integrate a PIX 501 behind a Roadrunner cable modem.

I'm not able to ping the default gateway address that I receive from Time-Warner's DHCP server. (I have link lights on both the PIX and the cable modem, and in fact, do receive IP configuration from Time-Warner.) Most unusually, I get different IP addresses depending if I connect a PC or the PIX, completely different subnets.

I CAN ping the PC when it is directly connect to the cable modem.

Is there some issue peculiar to the Roadrunner? Any insight would be greatly appreciated.

Thanks in advance.

Doug

Re: PIX 501 & Roadrunner cable modems

mike-greene — Tue, 31 Dec 2002 18:06:16 GMT

Hi, in order to allow echo-replys back through the PIX your going to have to apply an access list or a conduit.....

Conduit

----------------------------------------------------------------

conduit permit icmp any any echo-reply

Access List

-----------------------------------------------------------------

access-list outside permit icmp any any echo-reply

access-group outside in interface outside

Hope that helps.....

Re: PIX 501 & Roadrunner cable modems

doug.porter — Thu, 02 Jan 2003 13:10:09 GMT

Thanks Mike. I'm fairly sure I used the following:

access-list outside permit icmp any any

but I'll double check.

Thanks again.