PIX 515 Issue

[rryan]

I am replacing a software firewall with a PIX515E. I'm using the same inside and outside address's that are currently in place. I can ping to my inside router from the PIX, but no other traffic going through. I must be missing something. If someone could please take at look at this config, I would really appreciate it. Thanks,

[Karar]

Hello Ryan,

you need to create acl to allow smtp & www and access-group under the outside interface.

access-list NameofACL permit tcp any destination eq 25

access-list NameofACL permit tcp any destination eq 80

access-group NameofACL in interface outside

clear xlate

after you make the changes

This is assuming smtp and www from Net address range.

Let me know if it works for you.

[rryan]

I know that, I just haven't gotten to that part because I get no outbound traffic from the inside interface. I get xlate's, but nothing goes through. I can ping my inside interface from my host's and can ping my inside host's from the PIX. Any idea's?

Thanks,

[Karar]

Is your inside network directly connected to your Pix ?

If not consider static routes pointing to next hop.

Is the default route set correctly on the host ?

[rryan]

I have a 2610 pointing all outbound traffic to the inside address. The setup is currently working on a different firewall with the same address's. Just unplugging the old firewall and plugging in the PIX.

[Karar]

run this cmd;

logging buffered

and do a traceroute/ping/www thru the fw.

This will no doubt fail and you will notice a deny message in the log.This message should indicate

whether a route does not exist, permission issue,translation problems or some other reason.

Also post the error message that results from test if these suggestions to do not work out.

[rryan]

Thanks, I will do that tomorrow as soon as I can take the network offline. Do you think there could be a compatibility issue with the broadband modem, is there any reason the modem would need to be power cycled? Just thoughts!

[rryan]

I did the logging buffered command, but it shows 0 messages, I also changed inside and outside ip address's to a subnet all it's own and put just 1 terminal behind it to rule out any problems from my normal internal network. I can ping the PIX from the terminal and vice versa, but no outbound. Could there be a problem with the IOS or a bad interface?