Article View: alt.certification.cisco
Article #38Re: Cisco 501
From: Dennis Willson
Date: Wed, 23 Nov 2005 19:02
Date: Wed, 23 Nov 2005 19:02
84 lines
4357 bytes
4357 bytes
I think you're right.... He needs NAT. James: If the Internet address is 194.97.248.40 and your PC address is 192.168.1.10 what about that makes you think you don't need address translation? Without translation the PIX will send out the address 192.168.1.10 to the Internet and that's NOT your Internet address (194.97.248.40 is) so you could never get a response, and changes are your provider won't allow that outbound anyway. Dennis mike jones wrote: > i think u need to enable nat translation > <jamesp010@hotmail.com> wrote in message > news:1132713089.786255.141300@g44g2000cwa.googlegroups.com... > >>Hi, >> >>I have a static IP address from my ISP. I also have a router with a >>built in Modem so I plug the router into the telephone line. If I make >>a direct connection from my router to my PC with the following >>addresses on my PC everything works fine, I get a connection to the >>internet (can view webpages): >> >>IP: 194.97.248.40 >>Subnet: 255.255.255.250 >>Default Gateway: 194.97.248.39 >> >>Preferred DNS : 193.167.64.5 >>Alternate DNS : 194.97.230.30 >> >>As soon as I connect my Cisco 501 PIX in between the PC and the router, >>I don't get any internet connection. Here are the steps I am >>following to configure the firewall, so please guide me where I am >>going wrong: >> >>I start the PDM by going to https://192.168.1.1/startup.html >> >>Once started and authenticated get the Basic Configuration and I leave >>the default values ( PIX Host Name = pixfirewall, Domain Name: >>ciscopix.com) >> >>On the next page "Outside Interface Configuration" I leave the >>"Speed to Auto" and I select "static IP address" and input the >>following details IP 194.97.248.40, Subnet Mask: 255.255.255.250 and >>Default Gateway: 194.97.248.39 >> >>On the next page I leave the remote VPN page empty >> >>On the next page I also leave the Auto update Configuration empty >> >>On the next page "Other Interfaces Configuration I can see the Inside >>and outside interface settings and the inside has a security level of >>100 and the outside has 0. >> >>On the next page "NAT and PAT Configuration" I select "do not >>translate any addresses. >> >>On the next page I disable the DHCP because I can allocate a specific >>IP for the PC connecting to the Firewall. >> >>After applying all these setting and saving them. I specify TCP/IP for >>my PC with the following addresses: >> >>IP: 192.168.1.10 >>Subnet Mask: 255.255.255.0 >>Default Gateway : 192.168.1.1 >> >>I try to connect to the internet but I will not let me connect. For >>some reason Skype is able to connect which is quite strange. >> >>Do I need to configure anything more? Why does it not allow me to >>connect to the internet? >> >>When I remove the firewall I am getting a connection. Please can you >>guide me? >> >>Thank you, >>James >> > > >
Technical Details
Message-ID:
<i7CdnZ1VgZojIRneRVn-sQ@baytsp.com>Path:
arc1-ca.pugleaf.net!g2news1.google.com!news4.google.com!border1.nntp.dca.giganews.com!nntp.giganews.com!local01.nntp.dca.giganews.com!nntp.baytsp.com!news.baytsp.com.POSTED!not-for-mailReferences:
<1132713089.786255.141300@g44g2000cwa.googlegroups.com> <11o7v047r9ubq9e@corp.supernews.com>Show Full Headers
Complete Article Headers
X-Google-Thread: 104b6e,51ead644dd84bb01 X-Google-Thread: 113d97,51ead644dd84bb01 X-Google-Attributes: gid104b6e,gid113d97,public X-Google-Language: ENGLISH,ASCII-7-bit Path: arc1-ca.pugleaf.net!g2news1.google.com!news4.google.com!border1.nntp.dca.giganews.com!nntp.giganews.com!local01.nntp.dca.giganews.com!nntp.baytsp.com!news.baytsp.com.POSTED!not-for-mail NNTP-Posting-Date: Wed, 23 Nov 2005 13:02:22 -0600 Date: Wed, 23 Nov 2005 11:02:21 -0800 From: Dennis Willson <giganews@taz-mania.com> User-Agent: Mozilla Thunderbird 1.0.2 (Windows/20050317) X-Accept-Language: en-us, en MIME-Version: 1.0 Newsgroups: alt.certification.cisco,fa.cisco Subject: Re: Cisco 501 References: <1132713089.786255.141300@g44g2000cwa.googlegroups.com> <11o7v047r9ubq9e@corp.supernews.com> In-Reply-To: <11o7v047r9ubq9e@corp.supernews.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Message-ID: <i7CdnZ1VgZojIRneRVn-sQ@baytsp.com> Lines: 84 NNTP-Posting-Host: 207.168.171.238 X-Trace: sv3-5TF32agv7RB1QxoDU5PbXQwMYeJwsL5gv8oLJ+ogv9VucyGoAdLPcLC8NKmHaN4uNGsZ80xyc76YQ9o!dTSYmrFk5P+B5OmXr0PNWNywQO4l7Y576wfYWjbDj7WqDyhIGmjQoqOCfq5iQe+GuNxOBEhdZ+A= X-Complaints-To: abuse@baytsp.com X-DMCA-Complaints-To: abuse@baytsp.com X-Abuse-and-DMCA-Info: Please be sure to forward a copy of ALL headers X-Abuse-and-DMCA-Info: Otherwise we will be unable to process your complaint properly X-Postfilter: 1.3.32