Stupid PIX configuration question.

Stupid PIX configuration question.

Secure Home | Search | About
 Networking Firewalls    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Stupid PIX configuration question. vic800r 02-22-2008
Posted by on February 22, 2008, 6:23 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Hi.

I am stuck with the simple config issue.
Here is what I have configured:

The PIX 501:

Inside - simple one range C network (255 addresses with NAT)
Outside - 4 public addresses network (PIX -Gateway)

+ Simple access-list and VPN.

What I am trying to get.

I want one machine on the internal network to share one folder
to one outside (public IP) machine by using standard Windows
protocol for shared folders.

And I can not make it to work.

Could someone help me with it?

Step by Step instruction will be highly appreciated.

Thank you.

Best

Vic.



Posted by Gerald Vogt on February 22, 2008, 6:42 am
If you were  Registered and logged in, you could reply and use other advanced thread options
On Feb 22, 8:23 pm, vic8...@gmail.com wrote:
> I am stuck with the simple config issue.
> Here is what I have configured:
>
> The PIX 501:

Without knowing the software version you run on the PIX, the your
current configuration, what you have tried, the kind of VPN you want
to use, the VPN client you use, etc. it is difficult to say.

There is a lot of documentation on cisco.com. Configuration guides for
PIX

http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_installation_and_configuration_guides_list.html

and more documenation including the reference guides

http://www.cisco.com/en/US/products/sw/secursw/ps2120/tsd_products_support_series_home.html

The configuration guides contain detailed descriptions how to setup a
variety of VPNs including the exact config commands.

Gerald

Posted by on February 22, 2008, 7:52 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Thank you for pointing me to the Cisco guides.

Lets put it the other way and simplify the task.


I have Cisco PIX 501 with the firmware version 6.3.
There is NOTHING CONFIGURED on it. Clean system.
Only NAT and the route outside are there.

Outside interface is connected to the internet provider switch.
Inside interface is connected to only one Windows machine.


Here is the task:

Windows machine inside (IP = 192.168.0.1)
Windows machine outside (Public IP)

The inside machine has only one shared folder which is wide open.

Please tell me what needs to be done to get
that shared folder on the internal machine
to become visible and accessible from the Internet
machine. Standard Windows way (like map network drive)
is preferable.



Thank you.




Posted by Gerald Vogt on February 22, 2008, 6:00 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
On Feb 22, 9:52 pm, vic8...@gmail.com wrote:
> Thank you for pointing me to the Cisco guides.

Did you read them?

> Lets put it the other way and simplify the task.
>
> I have Cisco PIX 501 with the firmware version 6.3.
> There is NOTHING CONFIGURED on it. Clean system.
> Only NAT and the route outside are there.

That already isn't nothing.

> Here is the task:
>
> Windows machine inside (IP = 192.168.0.1)
> Windows machine outside (Public IP)

There are many flavors of Windows out there.

> The inside machine has only one shared folder which is wide open.
>
> Please tell me what needs to be done to get
> that shared folder on the internal machine
> to become visible and accessible from the Internet
> machine. Standard Windows way (like map network drive)
> is preferable.

As I have written before the proper way to do that is to setup a VPN.
You did not answer which kind of VPN you want to set up or which VPN
clients have or want to use. The configuration guide for your software
version contains instructions how to set up various VPNs with various
Windows versions.

They also contain information/links how VPNs work which you don't seem
to know. You will have to read and understand that because otherwise
you may end up publishing the shared folders to the public.

Assuming you have Vista or XP on the remote computer you should
already have the L2TP/IPSec client. Instructions how to setup the PIX
and the Windows computer are in the configuration guide. If you have
the Cisco VPN client you can also use that. Instructions again, in
detail, are in the configuration guide. Other VPN clients can be used
as well. But without knowing which clients you have or want to use it
is impossible to say.

But so far, everything you need is in detail with explanations and
even some screenshots in the configuration guide. Just click through
the table of contents or look for L2TP, IPSec, or VPN in the index.

Gerald


Posted by Gary on February 25, 2008, 4:27 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
It might be easier to run a simple PPTP server on your PIX 501 as the
Windows clients are super easy to configure. Here's a sample config:
http://www.elifulkerson.com/articles/cisco-pix-pptp-setup

Also, try searching cisco.com for vpdn and PPTP.

-Gary

Similar ThreadsPosted
Stupid Americans! -- Stupid... Stupid... STUPID!!! __________-+__ gykjoke November 7, 2004, 12:58 pm
Newbie: basic "economy" network configuration question; internal email servers November 16, 2004, 7:04 am
Stupid Cisco 506 July 30, 2004, 6:12 am
I did something stupid - now am wondering what to do... August 9, 2005, 9:47 pm
PIX 501 Configuration Help May 27, 2006, 11:31 pm
Re: PIX Configuration Help ! August 30, 2006, 3:49 pm
need help with configuration January 31, 2007, 8:47 am
VPN/DMZ configuration help June 15, 2007, 7:53 am
NAT Device Configuration February 21, 2005, 5:27 pm
Network configuration.... June 28, 2005, 2:45 pm

The site map in XML format XML site map

Contact Us | Privacy Policy