Recent content by sdang

IT is all Working Now. Thanks

User Access Verification Password: Type help or '?' for a list of available commands. Workx> en Password: Invalid password Password: Invalid password Password: Invalid password Access denied. Workx> en Password: *********** Workx# show logging Syslog logging: enabled Facility: 20...

error when i enable the logging The pptp server on the outside is 63.210.163.211 the work station i am trying to pptp from is 172.16.0.2 Apr 23 2007 23:15:58: %PIX-4-106023: Deny tcp src outside:63.210.163.211/11534 d st inside:70.167.112.184/25 by access-group "outside-in" [0x0, 0x0]...

if i add this nat (inside) 1 0.0.0.0 0.0.0.0 0 0 should i remove this ? nat (inside) 1 172.16.0.0 255.255.255.0

Ok , that didnt work . The strange thing is that the NATED addresses can connect using PPTP or VPN but the ones that dont have a NAT entry can't.

Users inside our network need to use pptp to other networks. For some reason they are unable to from there machine. Do you know what i need to open up in the PIX.

Thanks again. I notice you have your CCNP and CCSP. Could you recommend some good cisco. What route did you take and are you working on you ccie ?

OK i got it to work . I went into the ASDM and notice this rule was there . 18 any any ip Deny [Implicit rule] I left the rule but added access-list outside-in extended permit icmp any host X.167.112.183 access-list outside-in extended permit icmp any host X.167.112.184 access-list...

The first command already existed. The second one gave me and error. Error: 70.167.112.186-70.167.112.186 overlaps with outside interface address Any other ideas? would be appreciated.

Syslog logging: enabled Facility: 20 Timestamp logging: enabled Standby logging: disabled Deny Conn when Queue Full: disabled Console logging: disabled Monitor logging: disabled Buffer logging: level debugging, 2858 messages logged Trap logging: disabled...

ok i enabled logging. Here is the pings i did C:\Documents and Settings\steve.TELANETIX>ping 70.167.112.183 Pinging 70.167.112.183 with 32 bytes of data: Request timed out. Request timed out. Request timed out. Request timed out. Ping statistics for 70.167.112.183: Packets: Sent = 4...

What would a basic Configuration look like so i can let everything in? So i can start securing it 1 by 1. Thanks Again for all your help.

I REBOOTED The modem place the pix in place and Still could not PING EXTERNAL ADDRESSES 70.167.112.183 ,70.167.112.184,70.167.112.185 but i can ping the pix .186 or access them by the web using IP's .183 or .184

Well when i hook up the pix by itself . the pix is not hooked up right now. I can not ping these external addresses 70.167.112.183 ,70.167.112.184,70.167.112.185 but i can ping the pix .186 or access them by the web using IP's .183 or .184

Ok, I had issues again when i hookedup the PIX by it self. Still was not able to ping the natted external addresses. I was able to ping the pix fine from the outside. I really appreciate your help. interface Ethernet0 nameif outside security-level 0 ip address 70.167.112.186 255.255.255.192...