PIX 501 Moving off server DHCP onto PIX DHCP

rdh.professional · ‎11-15-2010

I'm sure this is deceptively simple but I couldn't find a good Google answer on it.

I no longer want to use a server as the DHCP and just use the PIX DHCP. I can go into the PIX and enable DHCP and assign an address pool then disconnect the server from the network. From there I can ipconfig /renew and ping other computers on the network. So I believe that to be a sign that things are working on the DHCP side.

The issue is that I cannot access the internet. So I'm assuming somewhere in the PIX it is forwarding requests onto the old DHCP and therefore nothing is getting internet. I could be wrong but, I don't have much experience with Cisco routers and interfaces. That's why I posted in 'Getting Started'.

A second question, because we have multiple IP addresses and would like to upgrade the router, what would you suggest to replace a PIX 501 with a 15 person network?

Daniele Giordano · ‎11-15-2010

From PC can you PING your default gateway? Is it the PIX? Can you PING your DNS server? Can you resolve a name?

Can you post your PIX config and the output of "ipconfig /all" command?

This is my dhcp config:

dhcpd address 192.168.1.1-192.168.1.100 inside

dhcpd dns 212.216.112.112 212.216.172.62

dhcpd lease 3600

dhcpd ping_timeout 750

dhcpd enable inside

P.S. The PIX 501 can be use in a network up to 50 users without problems.

Best regards.

rdh.professional · ‎11-15-2010

router is at

192.168.5.1

DNS, Gateway, WINS, and DHCP all come up with this address as well.

I won't be able to test any suggestions until later. The users in this office cannot go with any downtime so I can only do this stuff after hours.

Windows IP Configuration

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . : domain.internal

Description . . . . . . . . . . . : Realtek PCIe GBE Family Controller

Physical Address. . . . . . . . . : C8-0A-A9-F0-E3-85

DHCP Enabled. . . . . . . . . . . : Yes

Autoconfiguration Enabled . . . . : Yes

Link-local IPv6 Address . . . . . : fe80::9a8:969d:ce6b:66d2%11(Preferred)

IPv4 Address. . . . . . . . . . . : 192.168.5.44(Preferred)

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Lease Obtained. . . . . . . . . . : Monday, November 15, 2010 8:05:17 AM

Lease Expires . . . . . . . . . . : Tuesday, November 23, 2010 8:05:18 AM

Default Gateway . . . . . . . . . : 192.168.5.1

DHCP Server . . . . . . . . . . . : 192.168.5.1

DHCPv6 IAID . . . . . . . . . . . : 197659305

DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-13-B7-82-76-C8-0A-A9-F0-E3-84

DNS Servers . . . . . . . . . . . : 192.168.5.1

Primary WINS Server . . . . . . . : 192.168.5.1

NetBIOS over Tcpip. . . . . . . . : Enabled

PIX Version 6.3(4)

interface ethernet0 auto

interface ethernet1 100full

nameif ethernet0 outside security0

nameif ethernet1 inside security100

hostname Name-pix

domain-name MyDomain.com

fixup protocol dns maximum-length 2048

fixup protocol ftp 21

fixup protocol h323 h225 1720

fixup protocol h323 ras 1718-1719

fixup protocol http 80

fixup protocol rsh 514

fixup protocol rtsp 554

fixup protocol sip 5060

fixup protocol sip udp 5060

fixup protocol skinny 2000

no fixup protocol smtp 25

fixup protocol sqlnet 1521

fixup protocol tftp 69

names

name 192.168.5.3 sbs01-inside

name x.x.x.139 sbs01-outside

name 192.168.5.26 printserver

access-list inbound1 permit tcp any host sbs01-outside eq 3389

access-list inbound1 permit tcp any host sbs01-outside eq smtp

access-list inbound1 permit tcp any host sbs01-outside eq https

access-list inbound1 permit tcp any host sbs01-outside eq pptp

access-list inbound1 permit gre any host sbs01-outside

access-list inbound1 permit tcp host x.x.x.143 any eq ldap

access-list inbound1 permit tcp host x.x.x.144 any eq ldap

access-list inbound1 permit tcp any host x.x.x.141 eq www

pager lines 24

logging on

logging buffered debugging

logging trap debugging

logging host inside sbs01-inside

mtu outside 1500

mtu inside 1500

ip address outside x.x.x.138 255.255.255.248

ip address inside 192.168.5.1 255.255.255.0

ip audit info action alarm

ip audit attack action alarm

pdm location sbs01-inside 255.255.255.255 inside

pdm location x.x.x.143 255.255.255.255 outside

pdm location x.x.x.144 255.255.255.255 outside

pdm location printserver 255.255.255.255 inside

pdm logging informational 100

pdm history enable

arp timeout 14400

global (outside) 1 x.x.x.140

nat (inside) 1 0.0.0.0 0.0.0.0 0 0

static (inside,outside) sbs01-outside sbs01-inside netmask 255.255.255.255 0 0

static (inside,outside) x.x.x.141 printserver netmask 255.255.255.255 0 0

access-group inbound1 in interface outside

route outside 0.0.0.0 0.0.0.0 x.x.x.137 1

timeout xlate 3:00:00

timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h225 1:00:00

timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:00

timeout uauth 0:05:00 absolute

aaa-server TACACS+ protocol tacacs+

aaa-server TACACS+ max-failed-attempts 3

aaa-server TACACS+ deadtime 10

aaa-server RADIUS protocol radius

aaa-server RADIUS max-failed-attempts 3

aaa-server RADIUS deadtime 10

aaa-server LOCAL protocol local

http server enable

http 192.168.5.0 255.255.255.0 inside

no snmp-server location

no snmp-server contact

snmp-server community public

no snmp-server enable traps

floodguard enable

telnet 192.168.5.0 255.255.255.0 inside

telnet timeout 5

ssh 0.0.0.0 0.0.0.0 outside

ssh timeout 5

console timeout 0

dhcpd address x.x.x.140-x.x.x.142 outside

dhcpd address 192.168.5.20-192.168.5.99 inside

dhcpd lease 3600

dhcpd ping_timeout 750

dhcpd auto_config outside

terminal width 80

: end