Can not load PDM

[MichaelDay]

For some reason I can not access my PDM from IE brwoser or Netscape anymore.

I follow this page

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_60/pdm_in/improve.htm

and check everything according to the list, and everything looks normal to me.

Please help me:
Her is my Pix 506E config:
Building configuration...
: Saved
:
PIX Version 6.1(4)
nameif ethernet0 outside security0
nameif ethernet1 inside security100
enable password xxxxxxxx encrypted
passwd xxxxxxx encrypted
hostname BlackHole
domain-name xxxxx.org
fixup protocol ftp 21
fixup protocol http 80
fixup protocol h323 1720
fixup protocol rsh 514
fixup protocol rtsp 554
fixup protocol sqlnet 1521
fixup protocol sip 5060
fixup protocol skinny 2000
no fixup protocol smtp 25
no names
access-list INBOUND permit tcp any host 67.bb.aaa.x3 eq smtp
access-list INBOUND permit tcp any host 67.bb.aaa.x2 eq domain
access-list INBOUND permit tcp any host 67.bb.aaa.x3 eq 443
pager lines 24
logging on
interface ethernet0 10baset
interface ethernet1 10baset
icmp permit any unreachable outside
icmp permit any echo-reply outside
icmp deny any echo outside
mtu outside 1500
mtu inside 1500
ip address outside 67.bb.aaa.x1 255.255.255.248
ip address inside 192.168.1.1 255.255.255.0
ip verify reverse-path interface outside
ip audit info action alarm
ip audit attack action alarm
pdm location 192.168.1.8 255.255.255.255 inside
pdm location 192.168.1.9 255.255.255.255 inside
pdm location 192.168.1.8 255.255.255.248 inside
pdm history enable
arp timeout 14400
global (outside) 101 interface
nat (inside) 101 0.0.0.0 0.0.0.0 0 0
static (inside,outside) 67.bb.aaa.x2 192.168.1.8 netmask 255.255.255.255 0 0
static (inside,outside) 67.bb.aaa.x3 192.168.1.9 netmask 255.255.255.255 0 0
access-group INBOUND in interface outside
route outside 0.0.0.0 0.0.0.0 67.bbb.aaa.x6 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h323 0:05:00 sip 0:30:00 sip_media 0:02:00
timeout uauth 0:05:00 absolute
aaa-server TACACS+ protocol tacacs+
aaa-server RADIUS protocol radius
http server enable
http 192.168.1.8 255.255.255.255 inside
no snmp-server location
no snmp-server contact
snmp-server community public
no snmp-server enable traps
floodguard enable
sysopt route dnat
service resetinbound
telnet 192.168.1.8 255.255.255.248 inside
telnet timeout 5
ssh timeout 5
terminal width 80
Cryptochecksum:a82e0e1eb39badeb6d92eab7b46c9447
: end
[OK]

and here is my ipconfig in host machine:
Windows 2000 IP Configuration

Host Name . . . . . . . . . . . . : matthew
Primary DNS Suffix . . . . . . . : xxxxx.org
Node Type . . . . . . . . . . . . : Broadcast
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : xxxxxx.org

Ethernet adapter Intel Fast Ethernet LAN Controller - onboard:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) 8255x Based
ion
Physical Address. . . . . . . . . : 00-06-5B-8C-51-BC
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.1.8
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1
DNS Servers . . . . . . . . . . . : 192.168.1.8

 

[MichaelDay]

Also, from my host machine (192.168.1.8) I am able to ping my Pix 192.168.1.1

 

[themut]

issue a "show ca mypubkey rsa" command, are you able to see a key? If not, then you need to regenerate your key:

ca zeroize rsa
ca generate rsa key <size>
ca save all


where the size can be 512, 1024 or 2048

 

[MichaelDay]

When I do the show key I got this:

BlackHole(config)# show ca mypubkey rsa

% Key pair was generated at: 16:26:16 Jan 15 2004

Key name: BlackHole.domain.org
Usage: General Purpose Key
Key Data:
305c300d 06092a86 4886f70d 01010105 00034b00 30480241 00d02e16 ed773365
8be7f62e a5ddb3b2 7a3e57a3 1b149788 24e87b1a 8ecb55d6 1d79509d b6bd5d26
8522e63b aea224a2 40aca353 63c5b586 99b13d28 b4f4cd91 89020301 0001

Is that what you mean?

 

[MichaelDay]

Um howcome my host machine has subnet Mask:

IP Address. . . . . . . . . . . . : 192.168.1.8
Subnet Mask . . . . . . . . . . . : 255.255.255.0

While in the Pix config got 255.255.255.255

Does it matter? Is it because the Host machine got subnet mask different?