Cisco PIX 506

Cisco PIX 506

Secure Home | Search | About
 Networking Firewalls    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Cisco PIX 506 smbusa2002 04-14-2006
|--> Re: Cisco PIX 506 Walter Roberson04-14-2006
Posted by on April 14, 2006, 12:30 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
I have a PIX 506. All my public IP starts with 66.153.... and then they
are mapped to a private IP in the PIx(Access list and Static ..)
We got some more new IP from my ISP that starts with 64.80....
Now I mapped(access list/static in PIX) the new IP (64.80..)
I can ping the firewall from inside
but then I cannot get it to work. my pC will not go on to the internet
Is there any other command i have to put in for 64.80..Ip address

Let me know
thanks
Sam


Posted by Walter Roberson on April 14, 2006, 1:02 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
>I have a PIX 506. All my public IP starts with 66.153.... and then they
>are mapped to a private IP in the PIx(Access list and Static ..)
> We got some more new IP from my ISP that starts with 64.80....
>Now I mapped(access list/static in PIX) the new IP (64.80..)
>I can ping the firewall from inside
>but then I cannot get it to work. my pC will not go on to the internet
>Is there any other command i have to put in for 64.80..Ip address

PIX questions are better addressed to comp.dcom.sys.cisco -- more PIX
people hang around there.

You haven't shown enough of your configuration to be sure, but it
sounds to me as if the problem is that your WAN router is not
routing 64.80.whatever to the PIX outside interface IP. The
PIX -will- proxy arp for any IP declared static to its outside
network, but there are a number of circumstances under which proxy arp
is disabled on the PIX, and your WAN router might simply not be
expecting it, so it is always safer to have the WAN router route the
additional ranges to the PIX interface.

Posted by Spack on April 18, 2006, 7:30 am
If you were  Registered and logged in, you could reply and use other advanced thread options
smbusa2002@yahoo.com wrote on 14 Apr 2006 09:30:21 -0700:

> I have a PIX 506. All my public IP starts with 66.153.... and then they
> are mapped to a private IP in the PIx(Access list and Static ..)
> We got some more new IP from my ISP that starts with 64.80....
> Now I mapped(access list/static in PIX) the new IP (64.80..)
> I can ping the firewall from inside
> but then I cannot get it to work. my pC will not go on to the internet
> Is there any other command i have to put in for 64.80..Ip address

Did you reset the PIX power? Or run clear xlate? You need to clear the
existing translations in memory, and the arp cache. Had this happen last
time I changed IPs on a 515.

Dan



Similar ThreadsPosted
Cisco pix 515+ static routes between 2 cisco pix October 13, 2005, 8:09 pm
Cisco pix 515 + static routes between 2 cisco pix October 13, 2005, 8:12 pm
WTB: CISCO WE ARE BUYING USED CISCO EQUIPMENT. February 14, 2008, 8:14 am
Cisco PIX 501 September 14, 2005, 11:51 am
Cisco November 22, 2005, 9:27 pm
Cisco ASA help October 3, 2006, 1:36 pm
Cisco VPN client July 15, 2004, 10:49 am
Stupid Cisco 506 July 30, 2004, 6:12 am
Checkpoint and Cisco 501 August 29, 2004, 10:47 am
Allow access from RAS CISCO PIX December 31, 2004, 10:24 am

The site map in XML format XML site map

Contact Us | Privacy Policy