Can't access internet PIX 515

[quell]

I'm setting up a new pix 515 with version 6.2(2) I'm having trouble accessing the internet. From the pix I can ping the outside interface and inside interface and even the testpc. Cannot ping outside interface from teastpc but can ping inside interface. Could someone please look at this config and tell me what I'm missing, I'm at a loss.

internet---router---linksys---pix---testingpc
\----pix---switch---lan

PIX Version 6.2(2)
nameif ethernet0 outside security0
nameif ethernet1 inside security100
enable password xx encrypted
passwd xxx encrypted
hostname pix
domain-name xxx.Com
fixup protocol ftp 21
fixup protocol http 80
fixup protocol h323 h225 1720
fixup protocol h323 ras 1718-1719
fixup protocol ils 389
fixup protocol rsh 514
fixup protocol rtsp 554
fixup protocol smtp 25
fixup protocol sqlnet 1521
fixup protocol sip 5060
fixup protocol skinny 2000
names
access-list nonat permit ip 192.168.0.0 255.255.255.0 192.168.123.0 255.255.255.
0
interface ethernet0 auto
interface ethernet1 auto
icmp deny any outside (can ping without this)
mtu outside 1500
mtu inside 1500
ip address outside 65.x.x.243 255.255.255.240
ip address inside 192.168.0.253 255.255.255.0
ip audit info action alarm
ip audit attack action alarm
ip local pool vpnpool 192.168.123.1-192.168.123.10
pdm history enable
arp timeout 14400
global (outside) 1 65.x.x.241 netmask 255.255.255.255
nat (inside) 0 access-list nonat
nat (inside) 1 192.168.0.0 255.255.255.0 0 0
route outside 0.0.0.0 0.0.0.0 65.197.x.241 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h323 0:05:00 si
p 0:30:00 sip_media 0:02:00
timeout uauth 0:05:00 absolute
aaa-server TACACS+ protocol tacacs+
aaa-server RADIUS protocol radius
aaa-server LOCAL protocol local
no snmp-server location
no snmp-server contact
snmp-server community public
no snmp-server enable traps
floodguard enable
no sysopt route dnat
crypto ipsec transform-set ipvpn esp-des esp-md5-hmac
crypto dynamic-map dyna-brett 10 set transform-set steve
crypto map edgvpn 99 ipsec-isakmp dynamic dyna-brett
crypto map edgvpn client configuration address initiate
crypto map edgvpn client configuration address respond
crypto map edgvpn interface outside
isakmp enable outside
isakmp identity address
isakmp policy 10 authentication pre-share
isakmp policy 10 encryption des
isakmp policy 10 hash md5
isakmp policy 10 group 2
isakmp policy 10 lifetime 86400
vpngroup vpn address-pool vpnpool
vpngroup vpn dns-server 192.168.0.7
vpngroup vpn default-domain xxx.com
vpngroup vpn idle-time 1800
vpngroup vpn password xxx
telnet timeout 5
ssh timeout 5
terminal width 80
Cryptochecksum:xxxx
: end
[OK]

 

[haknwak]

try tracing a route to mit.edu from testpc
- where does it stop?

Also, I believe you won't be able to ping the outside interface from inside anyway. I can't from my network.

Telnet into the pix and try

ping outside 18.7.21.69

That is MIT.EDU's IP addie - does the PIX get there?









"If you lived here, you'd be home by now!"

George Carlin

 

[quell]

I finaly figured it out....after a smoke and bathroom break I came back and everything was working fine. Just took time for everything to register in the tables I guess. Thanx anyway though.

 

[quell]

err...ok can access internet now just fine from inside network. Prob is that after I connect with VPN from outside network I can not access any network resources. (shares, web pages etc) I am useing cisco vpn dialer to connect to pix 515. On one pix with same config I can browse the network fine. I cannot ping anything on the network from the vpn client pc. went through and compared both configs and are teh same except ios ver. Any ideas would be greatly appreciated thanx?