Can´t connect to the inside of pix 515E

[kenneth1974]

Hi, I´m in urgent need for help. I have bought an Pix 515E for the company.

First i connected the firewall and all outbound traffic was ok, but naturally no inbound traffic as mail got through.

So i tried to set up some rules (2), and they didn´t work so i deleted them. Not the any-any rule (the default one).

Upon the deletion of these to rules the 515E stalled. I turned it off and on again. But couldn´t connect to the internal ip 192.168.1.1

With some help from a friend we tried to restore default configuration - but we didn´t have any luck.

What is wrong?

[jc1012380]

Ken,

I've got a couple of ideas that may or may not work:

1. Can you get to the command line interface (CLI) of the firewall - if so, show the configuration (show config) and look for a line like this:

ip address inside 192.168.1.1 255.255.255.0

If there is an IP assigned to the internal interface it will be shown here.

2. If no line is present, see if you can manually add it in the Global or Exec mode through the (Configuration terminal)

If it accepts it, write to the memory (write memory) and see if you can reconnect through the browser.

Good luck.

J.C.

[kenneth1974]

Hi J.C

I can´t see any ip adress..

The syntax for entering this adress?

thx

[kenneth1974]

Hi J.C.

Thanks for your help, but you´ll have to make your instructions very basic.

I can get to the point where is can type : show config

I cant see that the inside interface has any ip.

If i enter HTTP, then the pix says http disabled

I entered an command, and then the pix comes and ask me for date, time etc. and finally and ip and subnet mask. I have entered 192.168.1.1 255.255.255.255 and then the system reloads.

I can now see that the ip adress on the inside is 192.168.1.1 but i can´t connect.

What can be wrong?

[jc1012380]

Hi Ken,

Your on the right track. Double check that your making a secure connection through your browser, e.g.

https://192.168.1.1

ensure that the "S" is present on your "http"

Are you using the PDM manager through web or some other emulation software, such as HyperTerminal?

[kenneth1974]

Hi again

I have tried using my IE with the https://192.168.1.1/ but no response from the pix.

I use Hyperterminal to connect to the pix on the console port.

But it looks like to me, that the http server is down on the pix?

[Aaron Wedemeyer]

Do you have some other device on your network with address 192.168.1.1? Someone brought up a wireless router for testing on my network, and it knocked out the PIX. Maybe you have something similar going on.

To test, unplug your PIX, then on any workstation Start, Run, CMD (Enter) Type Ping 192.168.1.1 (Enter) If the PIX is unplugged, you should get 4 returns of "Request timed out." If you do get a response, some device has the same address as teh PIX.

[kenneth1974]

Hi aw

I use a laptop to connect to the Pix, and i disable my wlan and use a crossed cable to test the ip, so there should be no other device with the same ip.

I naturally have another device on my network with ip 192.168.1.1 that is why i use a laptop with no connection to the existing network.

My problem right now is that the pix will not answer on ip 192.168.1.1 on https

[Aaron Wedemeyer]

Check the IP settings on the laptop? Is it in the .1 subnet, and have a functional gateway setting?

Crossover ethernet cable? Are you sure you want a crossover and not a straight? I don't know, just asking a question.