PIX 515 Help

[harrisgirls]

Hello,

I've just got my hands on a Cisco PIX 515.

I mainly brought it too learn and play with, i done some cisco stuff in the past but not much.

I just need too get this up and running with a IP Address on ethernet1 (192.168.1.254) but when I run the command "nameif ethernet1 inside security100" in enable mode all I keep getting is ERROR % Invaild input detected at '' maker.

Any help would be great!

[harrisgirls]

just checking, I can ping DNS IP Addresses from the pix also.

[PAUL GILBERT ARIAS]

if your internal PCs have the right IP, default gateway and DNS they should be able to navigate.

[harrisgirls]

PC is set as:

IP: 192.168.1.166

SN: 255.255.255.0

GW: 192.168.1.250 (PIX)

DNS: 192.168.1.250

DNS2: 192.168.1.101

Let me go test again

[PAUL GILBERT ARIAS]

not sure if the DNS will work like that. I have never used the PIX as a DNS server. You can use 4.2.2.2 or 8.8.8.8 as your DNS servers.

[harrisgirls]

Success!!

looks like its working mate!

All I need too know now is how too port forward, for example:

SMTP too 192.168.1.101 (exchange server)

do you know what command that would be, i have a few more port forwards but im sure I can work out the rest.

[PAUL GILBERT ARIAS]

you can use the following:

static (inside,outside) tcp interface smtp 192.168.1.101 smtp

access-l outside_in permit tcp any interface outside eq smtp

access-g outside_in interface outside

That should do it. Replicate the same port other TCP ports.

I things are all clear please remember to rate the thread.

[harrisgirls]

Thanks, the first 2 commands go in fine, but the other:

Result of the command: "access-g outside_in interface outside"

access-g outside_in interface outside
                      ^
ERROR: % Invalid input detected at '^' marker.

[PAUL GILBERT ARIAS]

ups, sorry. try now:

access-g outside_in in interface outside

[harrisgirls]

• looks like that worked!!!

also I want access too the owa page via HTTPS, would the commands be:

static (inside,outside) tcp interface https 192.168.1.101 https

access-l outside_in permit tcp any interface outside eq https

access-g outside_in in interface outside

[PAUL GILBERT ARIAS]

correct

[PAUL GILBERT ARIAS]

this line is only needed once

access-g outside_in in interface outside

[harrisgirls]

Thank you for all your help, I have learnt alot tonight thanks too u!!! - i'll be asking you again defo!!

Lastly, how do I save the entire config just incase it goes pop.

[PAUL GILBERT ARIAS]

yes save the config using the command "write mem"

[harrisgirls]

I've done that, I mean save it as a file in some way.

[PAUL GILBERT ARIAS]

sure you can do that. the easiest way is to do "show run" then copy and paste the config into a text file.