July 24, 2008 02:19pm pdt

1. eoinosullivan 115,737
2. strung 92,055
3. pheidius 56,125
4. darron_c... 25,545
5. kanlue 22,750
6. jhyiesla 13,830
7. ParadiseITS 11,675
8. DrNikon224 9,010
9. ozo 7,900
10. vishal_im... 7,370
11. danomatic 6,500
11. b0lsc0tt 6,500
13. MiniDevo 5,500
13. Rothlis 5,500
15. Marketing... 5,475

1. eoinosullivan 282,514
2. strung 130,167
3. pheidius 88,410
4. DrNikon224 65,682
5. darron_c... 38,005
6. kanlue 22,750
7. slyong 20,705
8. ozo 15,290
9. ParadiseITS 15,225
10. jhyiesla 13,830
11. heterony... 13,525
12. Arthur_M... 11,840
13. dalesit 10,950
14. mcmarks 8,958
15. randdv8 8,940

05.15.2008 at 06:45AM PDT, ID: 23405059

	[x] Attachment Details

[x]

The Solution Rating System

With so many solutions, how can you tell which solutions are most likely to help you and which ones are not? To provide you with a tool to use, we rate our solutions based on various elements that most accurately determine if a solution is a quality solution. To explain what factors affect the solution rating, here are the elements we take into consideration when formulating our solution rating.

The Grade of the Solution
The Zone Rank of the Expert Providing the Solution
The Number of Author and Expert Comments
The Number of Experts Contributing
The Feedback of the Community

Your Input Matters
Because of the way the system is set up, the most important variable in this equation is you. As a member of Experts Exchange, you are able to cast your vote on the quality of the solutions in regard to how complete, accurate, helpful and easy to understand each solution is. When you provide your feedback, each rating is adjusted accordingly. So, if you see a solution that has a poor rating that you think is a good solution, let us know by rating it. As you do, the rating will be adjusted and will become more accurate for other members of our site.

If you have any suggestions that you would like to make for our rating system, please ask a question in the Suggestions Zone of Community Support.

Thank you!

9.7

can't access internet from PIX

Zones: Mac OS X, Network Software Firewalls

Tags: Cisco, PIX 506E, Version 6.3

Hi All,

I have a PIX firewall I have done some configuration I can ping global IP addresses from Hyper Terminal, I can ping inside interface (e1) from my PC, but I can ping Outside interface (e0) from my PC, and cant ping global IP from my PC of course. Do I have to allow some policy to enable is. How can I access internet? WHAT IS MISSING.

My configuration is:

PIX Version 6.3(4)
interface ethernet0 100full
interface ethernet1 100full
nameif ethernet0 outside security0
nameif ethernet1 inside security100
hostname pixfirewall
fixup protocol dns maximum-length 512
fixup protocol ftp 21
fixup protocol h323 h225 1720
fixup protocol h323 ras 1718-1719
fixup protocol http 80
fixup protocol rsh 514
fixup protocol rtsp 554
fixup protocol sip 5060
fixup protocol sip udp 5060
fixup protocol skinny 2000
fixup protocol smtp 25
fixup protocol sqlnet 1521
fixup protocol tftp 69
names
name 10.10.1.5 insidehost
pager lines 24
logging on
mtu outside 1500
mtu inside 1500
ip address outside dhcp
ip address inside insidehost 255.255.0.0
ip audit info action alarm
ip audit attack action alarm
pdm history enable
arp timeout 14400
nat (inside) 1 10.10.0.0 255.255.0.0 0 0
route outside 0.0.0.0 0.0.0.0 79.121.232.98 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h225 1:00:00
timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:00
timeout uauth 0:05:00 absolute
aaa-server TACACS+ protocol tacacs+
aaa-server TACACS+ max-failed-attempts 3
aaa-server TACACS+ deadtime 10
aaa-server RADIUS protocol radius
aaa-server RADIUS max-failed-attempts 3
aaa-server RADIUS deadtime 10
aaa-server LOCAL protocol local
no snmp-server location
no snmp-server contact
snmp-server community public
no snmp-server enable traps
floodguard enable
telnet 10.10.0.0 255.255.0.0 inside
telnet timeout 5
ssh timeout 5
console timeout 0
dhcpd address 10.10.1.203-10.10.1.205 inside
dhcpd lease 3600
dhcpd ping_timeout 750
dhcpd domain ndtc.local
dhcpd auto_config outside
dhcpd enable inside
terminal width 80
: end

Regards

Start your free trial to view this solution

Question Stats

Zone: Apple

Question Asked By: rawandnet

Solution Provided By: cunyjschool

Participating Experts: 2

Solution Grade: A

Translate:

Loading Advertisement...

20080236-EE-VQP-29 / EE_QW_2_20070628