Can not connect to pix 515E :(

[unarcher1]

hi guys

I connected the eth1 interface to a hub and my laptop to the hub

The link led is flashing green on both interfaces

I cannot ping the pix515E on 192.168.1.1 and do not have a valid IP adress on my laptop despite PIX being able to give DHCP adress

If I manually set my laptop to 192.168.1.133, I cannot ping the PIX nor accessing the https://192.168.1.1/startup.html page

I do not understand the problem so if somebody can help me :(

(Excuse my poor english)

[unarcher1]

just two more questions before buying upgrade :

- our failover version of pix was a 6 ethernet port.

If we buy a 515 FO-R version which only support 3 ports, will it work? (no, or only with 3 ports, or with the 6?)

Or is it necessary to buy a FO-UR upgrade

- how do I upgrade the Pix after receiving the Licence Upgrade? Is it a key to enter into the console mode, or something to upload into the pix (and how to do that?)

thanks by advance

[pkapoor]

Get a UR license.

For the license upgrade, you should get an activation key. This key consists of 4 octets of hex characters (that define your license).

At the CLI, just enter the command:

pix(config)#activation-key

And then reload your PIX.

[unarcher1]

ok thanks

Do you think that not having pdm access and not beeing able to ping the PIX was due to having a failover Pix?

Buying the upgrade licence will solve the problem for 100%?

(I do not want to advise my boss to buy a many hundreds euros licence if it cannot resolve all the problem)

Sorry for all these stupid questions but I need to know to make the good choice :p

[pkapoor]

The deal with the failover PIX not responding to anything is because it does not. If a PIX is in failover, it is considered to be standby unit. It will only respond after assuming the identity of the primary unit (the one of the pair that has the UR license), which happens after a failover.

Therefore, a PIX with UR license will do the trick for you.

[pkapoor]

OK. Your debugs are working.

Try what the next post suggests - entering "icmp permit any inside" command on the PIX.

If that does not work, then please post your configuration (from the PIX) and I will analyze it for you.