cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
499
Views
0
Helpful
1
Replies

PIX and Internet Explorer with proxy

flscher
Level 1
Level 1

Hi experts,

I'm using IE configured with proxy (the proxy's IP is public IP address). If my LAN is directly connected to a router (running RFC1483 bridging), I can get my address bridged and then connect to the internet.

But, after I use PIX:

LAN (192.168.10.0)==PIX==(10.240.41.11)router == net

I cannot connect to the net anymore. I tried using PAT for outbound connection, but the router cannot NATted it anymore. So, I'm using a static translation like this:

Static(inside,outside) 192.168.10.0 192.168.10.0

I see from debug ip nat detail, the packet is being translated like usual. But, it seems that the reply packet from the proxy (203.81.71.237) doesn't reach back to my computer.

*Mar 3 15:47:21.305: NAT: Allocated Port for 192.168.10.77 -> 10.240.41.11: wanted 1359 got 1359

*Mar 3 15:47:21.305: NAT: i: tcp (192.168.10.77, 1359) -> (203.81.71.237, 8080) [2599]

*Mar 3 15:47:21.305: NAT: s=192.168.10.77->10.240.41.11, d=203.81.71.237 [2599]

*Mar 3 15:47:24.310: NAT*: i: tcp (192.168.10.77, 1359) -> (203.81.71.237, 8080) [2601]

*Mar 3 15:47:24.310: NAT*: s=192.168.10.77->10.240.41.11, d=203.81.71.237 [2601]

*Mar 3 15:47:24.330: NAT*: o: tcp (203.81.71.237, 8080) -> (10.240.41.11, 1359) [52837]

*Mar 3 15:47:24.330: NAT*: s=203.81.71.237, d=10.240.41.11->192.168.10.77 [52837]

*Mar 3 15:47:27.323: NAT*: o: tcp (203.81.71.237, 8080) -> (10.240.41.11, 1359) [55225]

*Mar 3 15:47:27.323: NAT*: s=203.81.71.237, d=10.240.41.11->192.168.10.77 [55225]

I even allow any packets from 203.81.71.237 to 192.168.10.0/24, but still can get it right.

Can you point me what's wrong?

Thanks in advance.

Makka

1 Reply 1

mpalardy
Level 3
Level 3

Is the pix properly configured to permit access between hosts ? Access-list, static, etc...

Any syslog from the pix would help.

Review Cisco Networking for a $25 gift card