Cisco Pix 515e Basic CLi configuration

[srikanth ath]

Hi all

Im very new in using cisco community as well with the PIX i have.I dint have any experience in Using cisco pix firewall. i got this for home lab practice.the pix can be accessed and configured by web based and CLI mode right.. can any of you please share or map out the basic configuariton tto configure pix 515e in cli mode.

as of now im using console( hyper terminal) to access the pix.

in cli based commands  i need the following

1. how to assign ip address to inside ethernet and outside ethernet

2. how to enable telnet and after enabling it , can i connect my pc directly to the pix inside ethernet and do telnetting or if at all possible with (https enabled)web based config. any of these are ohk.

went at browsing to find these all i could find is web based configs. i need cli commands. hope u all help me out in learning the pix..

Thanks & regards

[varrao]

Hi Srikanth,

Here the command reference for PIX CLI:

http://www.cisco.com/en/US/customer/products/sw/secursw/ps2120/prod_command_reference_list.html

Let me know if you need anything else.

Thanks,

Varun

[srikanth ath]

Hi varun

thanks for the fast reply but i couldnt visit the page as it says. the page is forbidden file or application.as i may not be able to see this i think

can you please copy the content in the page and attach it here

Forbidden File or Application

The file or application you are trying to access may require additional entitlement or you are trying to access a file with an invalid name. Additional entitlement levels are granted based on a users relationship with Cisco on a per-application basis.

If you feel you have reached this page in error, please try one of the following methods to locate your document:

1. If you are manually entering the URL into your browser location bar, be sure to include the file name of the page you are trying to access (file names typically end in .htm, .html or .shtml).
2. Use the Search feature located in the upper right section of this page.
3. Return to the Cisco.com Home or select a primary site area from the top navigation bar.
4. Consult with your Cisco Account Manager to confirm you have the appropriate entitlement to access this page.

waiting for your reply

thanks & regards

srikanth

[cadet alain]

Hi,

try this link, this is the same as above but without the customer directory:

http://www.cisco.com/en/US/products/sw/secursw/ps2120/prod_command_reference_list.html

Alain.

[srikanth ath]

Hi cadet

it has the most the information

but the thing i couldnt understand is. how to go to the interfaces.

like we do in switch and router

#int fa 0/10

#ip address 192.168.1.1 255.255.255.0

#no shut

Likewise the same way in PIX515e how to configure  ip for the inside or outside interface where the port can be used for telnetting.

[varrao]

Here's teh config guide on how to configure interface on PIX:

http://www.cisco.com/en/US/docs/security/pix/pix63/configuration/guide/bafwcfg.html#wp1128755

Cheers,

Varun

[srikanth ath]

Hi

thanks varun

i have assigned ip address to interface

but if i directly connect my pc to PIX , i couldnt even ping it. nor telnettting.

i may be troubling u a lot i know. god damn i need to use telnet to access my pix or WEB based mode atleast .

1. is that i can connect my pc directly to PIX to access switch by telnet or web based app.(as in starting guide it says to use switch or hub in between pc and pix).

thanks & regards

srikanth

[varrao]

Hi Srikanth,

To ping the PIX you need to add this:

icmp permit any

For telnet you would need:

telnet 0 0

alongwith AAA commands:

aaa authetication telnet console LOCAL

There is a section in teh config guide that I sent for management access, that woudl help you.

http://www.cisco.com/en/US/docs/security/pix/pix63/configuration/guide/sysmgmt.html#wp1002011

Thanks,

Varun

[srikanth ath]

Thanks varun

[varrao]

No issues Srikanth...You can post on the thread whenever you are stuck.

Varun