pix 515

[buyyana]

ip address outside 192.168.30.3 255.255.255.0

ip address inside 192.168.20.1 255.255.255.0

ip address DMZ 192.168.10.151 255.255.255.0

global (outside) 1 interface

global (DMZ) 1 interface

nat (inside) 1 0.0.0.0 0.0.0.0 0 0

nat (DMZ) 1 0.0.0.0 0.0.0.0 0 0

static (inside,DMZ) 192.168.20.0 192.168.20.0 netmask 255.255.255.0 0 0

route outside 0.0.0.0 0.0.0.0 192.168.30.1 1

router outside interface ip is 203.90.113.182 255.255.255.252

i know that u have to assign one public ip to pix outside interface. but i have only 1 public ip and i don't want to access internet i wiil use for to connect my client.

from pix i am unable to ping router outside ip .

[paddyxdoyle]

Hi,

Can you ping your gateway address 192.168.30.1 ?

Are you denying icmp from any networks from pinging your interfaces?

If you are blocking icmp this would show up in your firewall logs

Issue "show icmp" will show if you are blocking icmp

i.e. icmp deny any outside

If you are then you could issue

permit icmp host 203.90.113.182 echo-reply outside

Rgds

Paddy

[buyyana]

thanks ,

i already check this solution it's not work and also i am unable to access my mail server which is posted at ISP site.

Regards,

Narayan

[spremkumar]

hi

since ur using private block in u r router inside ethernet and public in router outside interface r r u doing natting or confiugred nat in the router side ??

do post ur router config too ..

regds