Network Security

I have a pix 515e and am having trouble getting to a remote site 3 hops from my central office router. The addresses are all 10 nets. I can get to everything directly attached to the central office 3600. I am not running any sort of routing on the...

I'm in a situation where I have only a single DHCP assigned Internet IP and have a web/ftp server on an internal host that needs to be published to the Internet, however, all other network hosts must be able to access web and ftp protocols on the Int...

Hello Everyone, I have set up a tunnel between my PIX 515 and a Checkpoint Firewall at one of our vendors. The tunnel comes up fine, and the vendor can ping machines on my side, but I cannot ping machines on their side. When I do a "show crypto ipsec...

I have not had much experience working with DMZ's before. Really just wondering if I should and can run the Microsoft Small Business Server 2003 Standard in a DMZ. SBS 2003 Server will be hosting our Company email and public website, as well as an in...

I am trying to get Ciscoworks to communicate with the 3000 concentrator and I can not get the SNMP write to work. It keeps failing. I have the community strings set correctly. It only uses one string for both read/write. But when I do a test from Cis...

Hi,I have configured on PIX the DHCPRelay function. See the attached config. The PIX uses a VPN tunnel to the remote site 192.168.18.0/24 on which there is a DHCP server. The PCs behind the local PIX are DHCP clients. I have tried the config in our t...

Recently we were having issues about collisions on one of pix interface(Half duplex). I would like to reset the counters and watch it again for troubleshooting. How to reset counters.

Hi to all,I have configured pix firewall 535(ver.6.2) with pix management console.Since pix MC does not support cisco vpn dilaup client, I am installing PDM and trying to import the confirutaion from pix to support vpn configuration.My question is do...

Hello,Has anybody configured SNMP V3 on routers/switches? i have read that this can do authentication and encryption of SNMP packets. can anybody guide me in this configuration. I want to later add these devices onto Cisco view.Thanks.

Hi,I have a 515 PIX and opened ports 21 and 3389 to allow a public subnet but for some reason it does not work and I wonder if somebody out there has a good working config for this; here is my config:fixup protocol ftp 21ip address outside x.x.x.130 ...

Hi,I have something strange going on, I have 3x 2950G-12 connected to a 3550, I've defined the 3550 as a seed device, but 2 of 2950 are not being discovered. I've checked Snmp, that's ok, I can see both switches in cdp table of the 3550, but they are...

Hi,we want to implement QoS in our 7200 boxes.But I don't find any hint in the documentationhow to calculate the performance requirements ot the processor engine. In fact the question is,how many Qos traffic can the different processor engines handle...

Hi, I have a Linux server that fetches a file via FTP from a server located on Internett. And each time my PIX sends a syslog message looking something like this:Apr 29 12:25:43 10.0.0.1 %PIX-4-106023: Deny tcp src outside:129.242.28.57/21 dst inside...

Hi all,I am configuring a PIX 501 and I would like to know if it is possible to restrict outbound access for a range of IP's as opposed to creating an access list for each IP address. I would like to create a scenario where one can differentiate the ...

Hi gurus,I have so many reference when I search this forum using the "load balance" key word. Starting find an answer can be used "ip load-sharing" command - just in my mind?? is it possible coz the ISP have to configure the "ip load-sharing" also ri...