Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
We have a Pix 525 unrestricted and another 525 for the failover. Am looking at upgrading the keys for the failover to make it into an unrestricted PIX. I only have 1 route out and am wondering if having 2 Pix firewalls going to the same route out wo...
I set up PIX with dynamic map so that remote client (workstation with Cisco VPN Client 4.6.00.0049) will work. Testing this on a Laptop with Windows 2000, where I had an internet connection outside of my outside interface of the PIX, I get the conne...
OK, so through the outside interface from the inside, what is the next hop after your outside interface. Is that what you are pinging? If so, what is that interface MTU set for?HTH
show your static for outside to inside and access-lists.example:static (inside,outside)198.137.151.2 10.0.0.11 netmask 255.255.255.255access-list outside_acl permit ip any host 198.137.151.2access-group outside_acl in interface outside
Well, you can put the global for the dmz back, or you can remove it and set up static translations to the dmz, it would look like this:static (inside,dmz1) 169.12.184.64 169.12.184.64 netmask 255.255.255.192Then they should be able to go back into th...
When you do a "show route", on the PIX, what does it show? Also, if you removed the global for the dmz (so that basically the dmz is translating with the outside interface IP, is there any change?) no global (dmz1) 1 interface But leave the NAT fo...
Well, sometimes a sh access-list outside could be erroneously done as no access-list outside, etc., and when you hit return, poof, the acl is history, or better yet....when trying to clear the counters, you try to put in clear access-list outside cou...
