What would the PIX config look like for Pix3?
Remember Multiple Internal Servers/Workstations on the internal side and Multiple Web Servers on the Server side.
Would you need multiple NICs in each machine?
And Hubs on each side of PIX 3?
internet router...
That's what I'm doing with the PIX(Transparent FireWall).
But I'm trying to incorporate a private(corp. Lan) on the same PIX, which I have learned is IMPOSSIBLE to do both.
So now I have to buy more Equipment to accomplish what I thought would be a simple task.
I have a Cisco RV042 and 3 Pix...
Here is the corrected one.
http://www.mediafire.com/file/ndncjotccmw/RV042_2-Pix_Generic-forum.jpghttp://www.mediafire.com/file/ndncjotccmw/RV042_2-Pix_Generic-forum.jpg
Sure, Here it is.
http://www.mediafire.com/file/ndncjotccmw/RV042_2-Pix_Generic-forum.jpghttp://www.mediafire.com/file/ndncjotccmw/RV042_2-Pix_Generic-forum.jpg
I need the:
static (inside,outside) 11.11.11.0 11.11.11.0 netmask 255.255.255.0 0 0
to allow internet access to the 11.11.11.81-87 Server addresses.
But that breaks the internet access for the 192.168.1.3-254(dhcp) addresses.
Supergrrover,
That gives me internet access from 192.168.1.3-254(dhcp addresses) and 11.11.11.80-87.
But I need acccess to 11.11.11.80-87 from 192.168.1.3-254(dhcp). How do I accomplish that?
Thanks, That is what I was afraid of.
Any recommendations?
I have an Cisco RV042 and 2 more Pix 506E's.
Can I accomplish it with those units?
Internet --> RV042 --> Pix1 --> Servers
|
Pix 2 --> Dev
When I remove the static, I lose access to the 11.11.11.80 network.
The static gives access to the servers and the ports on the 11.11.11.80 network as defined in the access-list 101.
I don't want NAT to those servers/ports. It's been configured this way for 6 years and works great.
What I am...
My ISP gave me 11.11.11.80-87 (the 11.11.11. are not the real #'s but everthing else is)
Here is the new scrubbed config:
PIX Version 6.3(4)
interface ethernet0 auto
interface ethernet1 auto
nameif ethernet0 outside security0
nameif ethernet1 inside security100
hostname ABC123
fixup protocol...
Did all of that and still cannot access the internet or computers on the 11.11.11.0 network from 192.168.1.2 computer.
When try to add the
route inside 192.168.1.0 255.255.255.0 192.168.1.1 1
I get
Route already exists
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.