Have a customer for which I did not install the PIX, that appears to have had periodic, sometimes weekly drops of their internet/DSL connection. Restablishing the connection can only be done by powering down both the DSL modem and the Cisco Pix.
What I am looking for is ideas on how to work with the telephone company to resolve this? They are talking about timeout settings. I will attach the current pix configuration. This ISP/telephone company requires PPPOE login whereas all the other companies I have worked with do not require that for their DSL connections. This has been happening for several years, unknown to me.
I know little about cisco pix configuration, but understand what the commands basically do. Ideally, we would like it to reconnect automatically if problems occur are not disconnect as quickly. We don't know the exact problem cause and it would appear that the phone company is not indicating problems themselves, which I think is potentially the problem?
The configuration printout is:
pix501(config)# wr t
Building configuration...
: Saved
:
PIX Version 6.2(2)
nameif ethernet0 outside security0
nameif ethernet1 inside security100
enable password xxxxxxxxxxxx
passwd xxxxxx
hostname pix501
domain-name companydomainname.com
fixup protocol ftp 21
fixup protocol http 80
fixup protocol h323 h225 1720
fixup protocol h323 ras 1718-1719
fixup protocol ils 389
fixup protocol rsh 514
fixup protocol rtsp 554
fixup protocol smtp 25
fixup protocol sqlnet 1521
fixup protocol sip 5060
fixup protocol skinny 2000
names
name 64.91.XX.XXX outside_intface
name 64.91.XX.XXX outside_grpwise
name 192.168.1.2 inside_grpwise
access-list inbound deny icmp any any
access-list inbound permit tcp any host outside_grpwise eq smtp
access-list inbound permit tcp any host outside_grpwise eq www
access-list inbound deny ip any any
pager lines 22
interface ethernet0 10baset
interface ethernet1 10full
mtu outside 1514
mtu inside 1514
ip address outside pppoe setroute
ip address inside 192.168.1.1 255.255.255.0
ip audit info action alarm
ip audit attack action alarm
pdm history enable
arp timeout 14400
global (outside) 1 interface
nat (inside) 1 192.168.1.0 255.255.255.0 0 0
static (inside,outside) outside_grpwise inside_grpwise netmask 255.255.255.255 0 0
access-group inbound in interface outside
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h323 0:05:00 sip 0:30:00 sip_media 0:02:00
timeout uauth 0:05:00 absolute
aaa-server TACACS+ protocol tacacs+
aaa-server RADIUS protocol radius
aaa-server LOCAL protocol local
http server enable
http 192.168.1.0 255.255.255.0 inside
no snmp-server location
no snmp-server contact
snmp-server community robin2_public
no snmp-server enable traps
floodguard enable
no sysopt route dnat
telnet 192.168.1.0 255.255.255.0 inside
telnet timeout 5
ssh 207.170.58.80 255.255.255.240 outside
ssh timeout 5
vpdn group ROBIN2 request dialout pppoe
vpdn group ROBIN2 localname xxxxxxxxx
vpdn group ROBIN2 ppp authentication pap
vpdn username xxxxxxxx password xxxxxxxx
terminal width 80
Cryptochecksum:a119c0a6b24
31f916b3ab
2a7bd41278
3
: end
[OK]
pix501(config)# show version
Cisco PIX Firewall Version 6.2(2)
Cisco PIX Device Manager Version 2.1(1)
Compiled on Fri 07-Jun-02 17:49 by morlee
pix501 up 19 mins 23 secs
Hardware: PIX-501, 16 MB RAM, CPU Am5x86 133 MHz
Flash E28F640J3 @ 0x3000000, 8MB
BIOS Flash E28F640J3 @ 0xfffd8000, 128KB
0: ethernet0: address is 000a.f40f.1454, irq 9
1: ethernet1: address is 000a.f40f.1455, irq 10
Licensed Features:
Failover: Disabled
VPN-DES: Enabled
VPN-3DES: Disabled
Maximum Interfaces: 2
Cut-through Proxy: Enabled
Guards: Enabled
URL-filtering: Enabled
Inside Hosts: 10
Throughput: Limited
IKE peers: 5
Serial Number: 806360988 (0x3010179c)
Running Activation Key: XXXXXXXXXXXXXXXXXXXXXXXXXX
XXXXXXXXXX
XXXXXXX
Configuration last modified by enable_15 at 14:38:27.648 UTC Mon Oct 14 2002
pix501(config)# show int
interface ethernet0 "outside" is up, line protocol is up
Hardware is i82559 ethernet, address is 000a.f40f.1454
IP address 64.91.XX.XXX, subnet mask 255.255.255.255
MTU 1492 bytes, BW 10000 Kbit half duplex
2601 packets input, 430289 bytes, 0 no buffer
Received 0 broadcasts, 0 runts, 0 giants
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
3285 packets output, 376416 bytes, 0 underruns
0 output errors, 1 collisions, 0 interface resets
0 babbles, 0 late collisions, 14 deferred
0 lost carrier, 0 no carrier
input queue (curr/max blocks): hardware (128/128) software (0/1)
output queue (curr/max blocks): hardware (0/5) software (0/1)
interface ethernet1 "inside" is up, line protocol is up
Hardware is i82559 ethernet, address is 000a.f40f.1455
IP address 192.168.1.1, subnet mask 255.255.255.0
MTU 1514 bytes, BW 10000 Kbit full duplex
3631 packets input, 408475 bytes, 0 no buffer
Received 328 broadcasts, 0 runts, 0 giants
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
2569 packets output, 406503 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
0 babbles, 0 late collisions, 0 deferred
0 lost carrier, 0 no carrier
input queue (curr/max blocks): hardware (128/128) software (0/5)
output queue (curr/max blocks): hardware (0/2) software (0/1)
pix501(config)#