Simple PIX 501 Question

[weaseldlb]

I have a quick and easy question.

Have been using a Cisco PIX 501 Firewall via a DSL connection to my hospital.

Would now like to use it on my connection to Comcast cable connection.

Does the PIX need to be re configured in any way, or can I just plug it in and use.

[Jouni Forss]

Hi,

Depends on the way your PIX501 firewalls "outside" interface is set up (if that is the name you are using for it)

If the interface has a static address and you are moving it behind another router/modem, chances are that that device wont have the same address range configure and therefore connections wont work just by simply plugging the device into the network.

If on the other hand the PIX is configured with DHCP on the outside interface (that it would get IP address automatically from the device in front of it) it should be possible to just plug the device to any router/modem that is using DHCP for the devices behind or optionally ofcourse the ISP might be doing this if the device provided acts as a bridge.

Can you share the configuration on the PIX? (remove any sensitive information if needed)

Also how is the comcast device configured? Do you get public IP addresses for PCs connected behind the modem or does the actual modem provide DHCP services? (with private IP addressing)

Since you are talking about hospital are we also talking about some sort of VPN connection? Will the PIX still be used for the hospital connection after moving it from DSL -> Cable?

- Jouni

[weaseldlb]

Hi Jouni,
Want to thank you so much for sharing your knowledge with me.

I'm afraid I'm not so tech-knowledgable as to be able to answer your

questions[?].

So I guess I'll go ahead with Plan B - which is to hire a consultant.
Alternatively, I suppose I could just plug it in, and see what happens ?

[Jouni Forss · Accepted solution]

Hi,

Ofcourse you can plug it in to see if works without any configuration changes.

In what type of use was the PIX previously? You say it was for a connection to a hospital? But from where?

Are you going to use it just for home use now or will the PIX still server a connection to the hospital?

Who handled the configurations of the PIX originally? I imagine if you can't configure the device yourself you might need some outside help.

I suspect if you need to make configuration changes to it, then the minimum you need is to know the possible username/password to log into the device (unless its on default settings regards to those settings). Also following a certain Cisco guide would also make it possible to erase the passwords from the PIX if you have forgotten them.

It might even be worth looking into a totally new firewall device instead of using money to get the old PIX501 working. You could for example get an ASA5505 which to my understanding should be lowest costing Cisco firewall model.

If you have found the information helpfull you can rate the answer. Thats the best thanks you can give on these forums

[weaseldlb]

Hi Jouni,

The PIX was used previously to connect my office computer to the hospital network.  When I retired, I lost the connection (which I will not longer be using - I'm now with Comcast)

The hospital IT department did all the configuration and maintenance while I was still in practice.

I think I've come the conclusion that the simplest/best solution is to just buy a totally new device, as you suggested.  Really appreciate all your help.