Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Is it possible to make pptp or ipsec connections to inside hosts from the internet without static translation of the inside host addresses? I have a PIX515 with 6.1(1). What commands are required? I have working connections to hosts with static IP ad...
If your network is as follows " internet--router--hub/switch--pix--hub/switch--workstation " then the pix default gateway should be set to the routers inside interface. If this is so then you should be able to ping the router inside interface from th...
Are you trying to ping 192.168.200.1or are you trying to ping 192.168.200.2?I don't think that you can ping the outside interface from inside, but you should be able to ping the next hop(router). Is your default route set to route outside 0.0.0.0 0....
Here's the list you need for ping and trace for an outside addressaccess-list 100 permit icmp any any time-exceededaccess-list 100 permit icmp any any echo-replyaccess-list 100 permit icmp any any unreachableaccess-group 100 in interface outside Do ...
If you want an explannation of the different System Log Messages, go to http://cisco.com/ and search on "System log messages version" were version is the release number of your PIX IOS.Ron
If you use the router as the default gateway, a packet going to the Internet, will be sent to the router and the router would re-send the packet to the PIX. The PIX can't send packets back out the same interface it recieved them on. This is a router ...