🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: alt.certification.cisco
Article #38

Re: Cisco 501

#38
From: Dennis Willson
Date: Wed, 23 Nov 2005 19:02
84 lines
4357 bytes
I think you're right.... He needs NAT.

James:
If the Internet address is 194.97.248.40 and your PC address is 192.168.1.10 what about that makes you think you don't need address 
translation? Without translation the PIX will send out the address 192.168.1.10 to the Internet and that's NOT your Internet address 
(194.97.248.40 is) so you could never get a response, and changes are your provider won't allow that outbound anyway.

Dennis




mike jones wrote:
> i think u need to enable nat translation
> <jamesp010@hotmail.com> wrote in message 
> news:1132713089.786255.141300@g44g2000cwa.googlegroups.com...
> 
>>Hi,
>>
>>I have a static IP address from my ISP. I also have a router with a
>>built in Modem so I plug the router into the telephone line. If I make
>>a direct connection from my router to my PC with the following
>>addresses on my PC everything works fine, I get a connection to the
>>internet (can view webpages):
>>
>>IP: 194.97.248.40
>>Subnet: 255.255.255.250
>>Default Gateway: 194.97.248.39
>>
>>Preferred DNS : 193.167.64.5
>>Alternate DNS : 194.97.230.30
>>
>>As soon as I connect my Cisco 501 PIX in between the PC and the router,
>>I don't get any internet connection. Here are the steps I am
>>following to configure the firewall, so please guide me where I am
>>going wrong:
>>
>>I start the PDM by going to https://192.168.1.1/startup.html
>>
>>Once started and authenticated get the Basic Configuration and I leave
>>the default values ( PIX Host Name = pixfirewall, Domain Name:
>>ciscopix.com)
>>
>>On the next page "Outside Interface Configuration" I leave the
>>"Speed to Auto" and I select "static IP address" and input the
>>following details IP 194.97.248.40, Subnet Mask: 255.255.255.250 and
>>Default Gateway: 194.97.248.39
>>
>>On the next page I leave the remote VPN page empty
>>
>>On the next page I also leave the Auto update Configuration empty
>>
>>On the next page "Other Interfaces Configuration I can see the Inside
>>and outside interface settings and the inside has a security level of
>>100 and the outside has 0.
>>
>>On the next page "NAT and PAT Configuration" I select "do not
>>translate any addresses.
>>
>>On the next page I disable the DHCP because I can allocate a specific
>>IP for the PC connecting to the Firewall.
>>
>>After applying all these setting and saving them. I specify TCP/IP for
>>my PC with the following addresses:
>>
>>IP: 192.168.1.10
>>Subnet Mask: 255.255.255.0
>>Default Gateway : 192.168.1.1
>>
>>I try to connect to the internet but I will not let me connect. For
>>some reason Skype is able to connect which is quite strange.
>>
>>Do I need to configure anything more? Why does it not allow me to
>>connect to the internet?
>>
>>When I remove the firewall I am getting a connection. Please can you
>>guide me?
>>
>>Thank you,
>>James
>>
> 
> 
> 
Technical Details
Message-ID: <i7CdnZ1VgZojIRneRVn-sQ@baytsp.com>
Path: arc1-ca.pugleaf.net!g2news1.google.com!news4.google.com!border1.nntp.dca.giganews.com!nntp.giganews.com!local01.nntp.dca.giganews.com!nntp.baytsp.com!news.baytsp.com.POSTED!not-for-mail
References: <1132713089.786255.141300@g44g2000cwa.googlegroups.com> <11o7v047r9ubq9e@corp.supernews.com>

Show Full Headers
Complete Article Headers
X-Google-Thread: 104b6e,51ead644dd84bb01
X-Google-Thread: 113d97,51ead644dd84bb01
X-Google-Attributes: gid104b6e,gid113d97,public
X-Google-Language: ENGLISH,ASCII-7-bit
Path: arc1-ca.pugleaf.net!g2news1.google.com!news4.google.com!border1.nntp.dca.giganews.com!nntp.giganews.com!local01.nntp.dca.giganews.com!nntp.baytsp.com!news.baytsp.com.POSTED!not-for-mail
NNTP-Posting-Date: Wed, 23 Nov 2005 13:02:22 -0600
Date: Wed, 23 Nov 2005 11:02:21 -0800
From: Dennis Willson <giganews@taz-mania.com>
User-Agent: Mozilla Thunderbird 1.0.2 (Windows/20050317)
X-Accept-Language: en-us, en
MIME-Version: 1.0
Newsgroups: alt.certification.cisco,fa.cisco
Subject: Re: Cisco 501
References: <1132713089.786255.141300@g44g2000cwa.googlegroups.com> <11o7v047r9ubq9e@corp.supernews.com>
In-Reply-To: <11o7v047r9ubq9e@corp.supernews.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Message-ID: <i7CdnZ1VgZojIRneRVn-sQ@baytsp.com>
Lines: 84
NNTP-Posting-Host: 207.168.171.238
X-Trace: sv3-5TF32agv7RB1QxoDU5PbXQwMYeJwsL5gv8oLJ+ogv9VucyGoAdLPcLC8NKmHaN4uNGsZ80xyc76YQ9o!dTSYmrFk5P+B5OmXr0PNWNywQO4l7Y576wfYWjbDj7WqDyhIGmjQoqOCfq5iQe+GuNxOBEhdZ+A=
X-Complaints-To: abuse@baytsp.com
X-DMCA-Complaints-To: abuse@baytsp.com
X-Abuse-and-DMCA-Info: Please be sure to forward a copy of ALL headers
X-Abuse-and-DMCA-Info: Otherwise we will be unable to process your complaint properly
X-Postfilter: 1.3.32