Allow the web  server(193.170.4.2) in DMZ to communicate with the our exchange server(10.77.51.87) internally via SMTP..for which I used access-list acl-dmz permit tcp host 193.170.4.2 host 10.77.51.87 eq smtp but it did not work. Is it because of the deny ip line in acl-outbound..or the nat ..please clarify. FYi ...here is the configuration. PIX_6.3(5)_515# access-group acl-inbound in interface outside access-group acl-outbound in interface inside access-group acl-dmz in interface dmz1 PIX_6.3(5)_515# PIX_6.3(5)_515# sh access-list acl-outbound | in deny access-list acl-outbound line 86 deny ip 10.0.0.0 255.0.0.0 193.170.4.0 255.255.255.0 (hitcnt=1209) access-list acl-outbound line 90 deny ip any any (hitcnt=1014022) PIX_6.3(5)_515# PIX_6.3(5)_515# PIX_6.3(5)_515# sh access-list acl-dmz access-list acl-dmz; 2 elements access-list acl-dmz line 1 permit udp host 193.170.4.2 host 198.6.1.4 eq domain (hitcnt=5625) access-list acl-dmz line 2 permit ip host 193.170.4.2 any (hitcnt=1089) PIX_6.3(5)_515# PIX_6.3(5)_515# PIX_6.3(5)_515# sh nat nat (inside) 0 access-list nonat nat (inside) 1 10.77.51.80 255.255.255.255 0 0 nat (inside) 1 10.77.51.81 255.255.255.255 0 0 nat (inside) 1 10.77.51.87 255.255.255.255 0 0 nat (inside) 2 10.76.0.0 255.255.0.0 0 0 PIX_6.3(5)_515# PIX_6.3(5)_515# sh run | in static static (inside,outside) tcp 195.99.136.85 smtp 10.77.51.87 smtp netmask 255.255.255.255 0 0 static (inside,outside) 195.99.136.81 10.77.51.58 netmask 255.255.255.255 0 0 static (inside,outside) 195.99.136.84 10.77.51.38 netmask 255.255.255.255 0 0 static (dmz1,outside) 212.140.175.173 193.170.4.2 netmask 255.255.255.255 0 0 static (dmz1,inside) 212.140.175.173 193.170.4.2 netmask 255.255.255.255 0 0 static (inside,dmz1) 10.76.0.0 10.76.0.0 netmask 255.255.0.0 0 0 PIX_6.3(5)_515# PIX_6.3(5)_515# PIX_6.3(5)_515# sh run | in global global (outside) 1 195.99.136.85 global (outside) 2 interface PIX_6.3(5)_515# PIX_6.3(5)_515# ... View more

Have quite a few questions for Implementing Radius for my network devices : Q.1.) How to safely implement aaa Radius authentication to make sure users have login using LOCAL database incase the Radius fails. Q.2.) How to provide only read access for few users and full access to Adminstrators. Q 3.) Incase if I save the config ..will it be possible to login to devices through any other alternative way ( assuming both the radius and Local credentials are not working). Q 4.) How to recover the password for devices especially firewalls. GReat it would be if someone can help me on these queries.. Thanks in advance. Regards, gHP. ... View more