Skip to main content

simple problem, starting to doubt hardware; pix 515e issue

More
14 years 1 month ago #35571 by RobWMK
Hello, I've been working with a Cisco Pix 515e running 7.2 for the past while, trying to convince it to route network traffic correctly. After lots of trying this and that, I wanted to get the most basic setup working, so I reset it to factory default configuration and then set up the inside and outside interfaces, the latter going to my normal router and acquiring its IP and default route through DHCP. With this setup, I'd expect a computer on the inside network to access the internet, or failing that, it should be able to access the router's website by ip address, since dns is not set up yet. While I can ping from the firewall itself outwards, it seems unwilling to pass traffic between the two interfaces. I'll put my current running config in with this; am I just missing something important, or is something else going on here? Thanks


PIX Version 7.2(2)
!
hostname MKPix
domain-name MK
enable password 8Ry2YjIyt7RRXU24 encrypted
names
!
interface Ethernet0
nameif outside
security-level 0
ip address dhcp setroute
!
interface Ethernet1
nameif inside
security-level 100
ip address 192.168.1.1 255.255.255.0
!
interface Ethernet2
shutdown
no nameif
no security-level
no ip address
!
interface Ethernet3
shutdown
no nameif
no security-level
no ip address
!
interface Ethernet4
shutdown
no nameif
no security-level
no ip address
!
interface Ethernet5
shutdown
no nameif
no security-level
no ip address
!
passwd 2KFQnbNIdI.2KYOU encrypted
ftp mode passive
dns server-group DefaultDNS
domain-name MK
same-security-traffic permit inter-interface
pager lines 24
mtu inside 1500
mtu outside 1500
no failover
icmp unreachable rate-limit 1 burst-size 1
asdm image flash:/asdm-523.bin
no asdm history enable
arp timeout 14400
nat (inside) 0 0.0.0.0 0.0.0.0
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout uauth 0:05:00 absolute
http server enable
http 192.168.1.5 255.255.255.255 inside
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
telnet timeout 5
ssh timeout 5
console timeout 0
!
class-map inspection_default
match default-inspection-traffic
!
!
policy-map type inspect dns preset_dns_map
parameters
message-length maximum 512
policy-map global_policy
class inspection_default
inspect dns preset_dns_map
inspect ftp
inspect h323 h225
inspect h323 ras
inspect netbios
inspect rsh
inspect rtsp
inspect skinny
inspect esmtp
inspect sqlnet
inspect sunrpc
inspect tftp
inspect sip
inspect xdmcp
!
service-policy global_policy global
prompt hostname context
Cryptochecksum:fc2972cb2d0da451791bcd78e18c2db3
: end
Time to create page: 0.117 seconds