Contact US

Log In

Come Join Us!

Are you a
Computer / IT professional?
Join Tek-Tips Forums!
  • Talk With Other Members
  • Be Notified Of Responses
    To Your Posts
  • Keyword Search
  • One-Click Access To Your
    Favorite Forums
  • Automated Signatures
    On Your Posts
  • Best Of All, It's Free!

*Tek-Tips's functionality depends on members receiving e-mail. By joining you are opting in to receive e-mail.

Posting Guidelines

Promoting, selling, recruiting, coursework and thesis posting is forbidden.

Students Click Here

Security, hacker detection & forensics FAQ

PIX Config

What is the minimum config to get my PIX working? by ixleplix
Posted: 15 Aug 05

PIX Basic configuration:

1. Plug into the console port on the PIX.
2. Make sure the terminal emulation software is set to use 9600 Bits per second.
3. When asked:

Pre-configure PIX Firewall now through interactive prompts [yes]?"

4. Type ônoö and hit enter.
5. Then youÆll see this:

Type help or '?' for a list of available commands.

6. Type ôenableö and hit enter


7. When it asks for a password...just hit enter.
8. Now youÆll see this:


9. Type ôconfig tö and hit enter

pixfirewall#config t

10. YouÆll see this:


11. Assign the IP addresses (& masks) to your interfaces:

pixfirewall(config)# ip address outside IPAddress Mask
pixfirewall(config)# ip address inside IPAddress Mask

12. Now set the enable password:

pixfirewall(config)# enable password YourEnablePassword

13. And the Telnet access password:

pixfirewall(config)# password YourTelnetPassword

14. Change the hostname to something that makes sense to you:

pixfirewall(config)# hostname YourHostname


15. Set the interface speed and the Duplex mode

     1. e0 is the outside interface and e1 is the inside interface by default.
     2. Make sure the int speed on the corresponding switchport is set the same too.
     3. The options are 100full, 100baset, 10full, or 10baset

PIX(config)# int e0 100full
PIX(config)# int e1 100full

16. Create NAT and Global translation rules:

PIX(config)# nat (inside) 1 0 0
            æThis allows all outbound traffic to be NATed
PIX(config)# global (outside) 1 interface
            æThis takes all outbound traffic and PATs it through the e0 (outside) interface

17. Now set the allowed range of IP address that can connect to the PIX via Telnet
PIX(config)# telnet AllowedIP Mask inside

18. Set the time allowed for telnet connections:

PIX(config)# telnet timeout TimeInMinutes

19. Set the default gateway for external traffic:

PIX(config)# route outside DefaultGatewayIP 1

Now if this were all put together, replacing the variables with the information below...


IP address (outside):
Int e0 speed:10Mbps
Int e0 duplex:Full
IP address (inside):
Int e1 speed:100Mbps
Int e1 duplex:Full
Default Gateway:
Enable Password:Hairy_People
Telnet Password:TomJone$
NAT:All inside traffic
Allowed Telnet Access:
Telnet timeout:10 minutes

...It would look like this--below--and could be pasted in at the config prompt:

ip address outside
int e0 10full
ip address inside
int e1 100full
hostname MyPIX
route outside 1
enable password Hairy_People
password TomJone$
nat (inside) 1 0 0
global (outside) 1 interface
telnet inside
telnet timeout 10

ThatÆs enough to get traffic flowing.


Until you type "write memory" and hit enter, the config will be dumped when the PIX is rebooted or looses power.

If your config is totally messed up, typing "write erase" and hitting enter, followed by "reload" and enter, will erase the stored config and leave you with the factory config upon boot. Please use this with caution.

As stated above, this is a BASIC config. It will get traffic flowing but has no Access-lists or Static mappings and does not use many of the security features the PIX is capable of. Remember: It is only intended to help you get started.







Back to Security, hacker detection & forensics FAQ Index
Back to Security, hacker detection & forensics Forum

My Archive

Close Box

Join Tek-Tips® Today!

Join your peers on the Internet's largest technical computer professional community.
It's easy to join and it's free.

Here's Why Members Love Tek-Tips Forums:

Register now while it's still free!

Already a member? Close this window and log in.

Join Us             Close