PIX 501 & Roadrunner cable modems

[doug.porter]

I'm trying to integrate a PIX 501 behind a Roadrunner cable modem.

I'm not able to ping the default gateway address that I receive from Time-Warner's DHCP server. (I have link lights on both the PIX and the cable modem, and in fact, do receive IP configuration from Time-Warner.) Most unusually, I get different IP addresses depending if I connect a PC or the PIX, completely different subnets.

I CAN ping the PC when it is directly connect to the cable modem.

Is there some issue peculiar to the Roadrunner? Any insight would be greatly appreciated.

Thanks in advance.

Doug

[mike-greene]

Hi, in order to allow echo-replys back through the PIX your going to have to apply an access list or a conduit.....

Conduit

----------------------------------------------------------------

conduit permit icmp any any echo-reply

or

Access List

-----------------------------------------------------------------

access-list outside permit icmp any any echo-reply

access-group outside in interface outside

Hope that helps.....

[doug.porter]

Thanks Mike. I'm fairly sure I used the following:

access-list outside permit icmp any any

but I'll double check.

Thanks again.