PIX Device Manager Not Opening

[Accountware]

After changing default configuration of the internal ip address can no longer get PDM 3.0(1) to open through IE 6. I can ping the new internal IP address 192.168.0.1 but pdm doesn't open with https://192.168.0.1

Running PIX 501 version 6.3(3)

Thanks

[pcomeaux · Accepted solution]

You should do a "show http" and see if you are allowing the hosts from the 192.168.0.0/24 network to PDM into the Pix.

There's a good chance this might not been changed from the previous subnet you were using.

Hope this helps,

peter

[Accountware]

You are correct, the show http command still shows "192.168.1.0 255.255.255.0 inside". I used the "configure terminal" then "setup" commands to attempt to reconfigure the pix firewall.

pixfirewall# configure terminal

pixfirewall(config)# setup

Pre-configure PIX Firewall now through interactive prompts [yes]? y

Enable password []:

Clock (UTC):

Year [2004]:

Month [Jun]:

Day [16]:

Time [14:33:31]:

Inside IP address [192.168.1.1]: 192.168.0.33

Inside network mask [255.255.255.0]: 255.255.255.0

Host name [***]:

Domain name [***]:

IP address of host running PIX Device Manager:

I did leave the command about houst running PIX Device Manager blank is this my mistake?

Or what is the proper procedure to reset the inside ip address?

Thanks

[jmia]

William,

If your inside interface is up and running and you need to enable PDM access from inside client(s) then in config mode on the pix do:

> http server enable

> http 192.168.1.0 255.255.255.0 inside

The above will allow any inside client on 192.168.1.0 to run PDM from the inside but if you need to only allow a specified client access to run PDM from the inside then do:

> http server enable

> http 255.255.255.255 inside

The above specified inside ip address will only have access to the PDM.

Save with write mem and your done!

Hope this helps and let me know how you get on.

Jay

[pcomeaux]

Yes, you can always re-run the setup routine to reconfigure the inside IP address. Other methods include using the command line configuration statements or PDM.

As far as you above example, yes, you could have entered in a new IP address for the host running Pix Device Manager. This would have enabled you to PDM into the Pix. Alternatively, you can use the commands the other replyer mentions.

Good luck and let us know how we can help further.

peter