new to pix firewall? commnd help?

[dragon20]

hay guys iam very to new to a pix firewall infact i have never used one seen one. i have done my ccna and ccnp sem 5 so i know abit about routing.

basically i going for a job interview and they want me to set up a pix firewall, i told them i never used it before and never been in my cirriculum, but they said they would give me as much time and i could bring in what i like to help me

basicalli wanted to ask if you guys know of any turortials for basic configureation etc anything you could offer i would appreciate it Thank you

 

[dopehead]

Well, this is the quick start guide for the PIX, will work for almost any pix only thing to be aware of is the speed on the ethernets, as the 506/501 PIX is a little bit different than say the 515.

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/config/overvw.htm

Quick config for a pix 515 would be :

interface ethernet0 100full
interface ethernet1 100full
ip address inside x.x.x.x x.x.x.x
ip address outside x.x.x.x x.x.x.x
global (outside) 1 interface outside
nat (inside) 1 0.0.0.0 0.0.0.0
route outside 0.0.0.0 0.0.0.0 <isp gateway ip>

This will make everything run through the pix, except for icmp.
If you wan't icmp reply do this
access-list acl-outside permit icmp any host <outside ip> echo-reply
access-group acl-outside in interface outside

Hope this helps you get the job
Jan

Network Systems Engineer
CCNA/CQS