Advertisement

03.26.2007 at 09:29AM PDT, ID: 22472789
[x]
Attachment Details
[x]
The Solution Rating System

With so many solutions, how can you tell which solutions are most likely to help you and which ones are not? To provide you with a tool to use, we rate our solutions based on various elements that most accurately determine if a solution is a quality solution. To explain what factors affect the solution rating, here are the elements we take into consideration when formulating our solution rating.

  • The Grade of the Solution
  • The Zone Rank of the Expert Providing the Solution
  • The Number of Author and Expert Comments
  • The Number of Experts Contributing
  • The Feedback of the Community

Your Input Matters
Because of the way the system is set up, the most important variable in this equation is you. As a member of Experts Exchange, you are able to cast your vote on the quality of the solutions in regard to how complete, accurate, helpful and easy to understand each solution is. When you provide your feedback, each rating is adjusted accordingly. So, if you see a solution that has a poor rating that you think is a good solution, let us know by rating it. As you do, the rating will be adjusted and will become more accurate for other members of our site.

If you have any suggestions that you would like to make for our rating system, please ask a question in the Suggestions Zone of Community Support.

Thank you!
6.6

LAN subnet to DMZsubnet access with PIX 515E

Asked by ioglyphics in Cisco PIX Firewall

Tags: ,

I can not reach host in my DMZ from my LAN.  We had multi honed Windows Web Server.  I just took over the network and was told by the previous Admin that this could create a loop.  I am not familiar with PIX at all so I am putting my access list, ip , and NAT info here to be analyzed by the experts here.  Please advise???!
I searched and found what seemed like the solution from another member here but I am just not certain as there was no response from the member to the expert saying that his solution worked.
It appears to me that there is no entry to NAT from the subnet of my DMZ 192.168.2.0 to my LAN subnet 192.168.1.0.


MatrixFW1# show access-list
access-list cached ACL log flows: total 0, denied 0 (deny-flow-max 4096)
            alert-interval 300
access-list Access_in; 24 elements
access-list Access_in line 1 extended permit icmp any host 67.103.180.198 (hitcnt=1560) 0x1c983445
access-list Access_in line 2 extended permit ip any host 67.103.180.198 (hitcnt=10523) 0x16c28239
access-list Access_in line 3 extended permit tcp any host 67.103.180.198 eq www (hitcnt=0) 0xcd121af
access-list Access_in line 4 extended permit tcp any host 67.103.180.198 eq https (hitcnt=0) 0x61586a17
access-list Access_in line 5 extended permit tcp any host 67.103.180.198 eq smtp (hitcnt=0) 0x5dc2e4ff
access-list Access_in line 6 extended permit tcp any host 67.103.180.197 eq www (hitcnt=350) 0x23a82c60
access-list Access_in line 7 extended permit tcp any host 67.103.180.197 eq smtp (hitcnt=9075) 0x17351e51
access-list Access_in line 8 extended permit tcp any host 67.103.180.197 eq pop3 (hitcnt=2) 0x42d2e53a
access-list Access_in line 9 extended permit tcp any host 67.103.180.197 eq https (hitcnt=2723) 0x8dcaa782
access-list Access_in line 10 extended permit tcp any host 67.103.180.197 eq imap4 (hitcnt=3) 0x9757a055
access-list Access_in line 11 extended permit tcp any host 67.103.180.198 eq ssh (hitcnt=0) 0xe141a612
access-list Access_in line 12 extended permit tcp any host 67.103.180.197 eq ssh (hitcnt=31) 0x131caa47
access-list Access_in line 13 extended permit tcp any host 67.103.180.197 eq pptp (hitcnt=14) 0x92ca501b
access-list Access_in line 14 extended permit gre any host 67.103.180.197 log informational interval 300 (hitcnt=82) 0x98c12557
access-list Access_in line 15 extended permit esp any host 67.103.180.197 log informational interval 300 (hitcnt=0) 0xe265760b
access-list Access_in line 16 extended permit udp any host 67.103.180.197 eq isakmp (hitcnt=0) 0x7f25ba14
access-list Access_in line 17 extended permit tcp any host 67.103.180.198 (hitcnt=0) 0xb7557f96
access-list Access_in line 18 extended permit udp any host 67.103.180.198 (hitcnt=0) 0xc14ee5bb
access-list Access_in line 19 extended permit udp any host 67.103.180.197 (hitcnt=2627) 0x218a7883
access-list Access_in line 20 extended permit tcp any host 67.103.180.198 eq domain (hitcnt=0) 0x12753803
access-list Access_in line 21 extended permit tcp any host 67.103.180.197 eq domain (hitcnt=0) 0x294dbec5
access-list Access_in line 22 extended permit udp any host 67.103.180.198 eq domain (hitcnt=0) 0xb17f8e59
access-list Access_in line 23 extended permit udp any host 67.103.180.197 eq domain (hitcnt=0) 0x9f49c99f
access-list Access_in line 24 extended permit icmp any host 67.103.180.197 (hitcnt=997) 0x591185cb
System IP Addresses:
Interface                Name                   IP address      Subnet mask     Method
Ethernet0                outside                67.103.180.194  255.255.255.192 CONFIG
Ethernet1                inside                 192.168.1.1     255.255.255.0   CONFIG
Ethernet2                DMZ                    192.168.2.1     255.255.255.0   CONFIG
Current IP Addresses:
Interface                Name                   IP address      Subnet mask     Method
Ethernet0                outside                67.103.180.194  255.255.255.192 CONFIG
Ethernet1                inside                 192.168.1.1     255.255.255.0   CONFIG
Ethernet2                DMZ                    192.168.2.1     255.255.255.0   CONFIG
MatrixFW1# show nat

NAT policies on Interface inside:
  match ip inside host 192.168.1.101 outside any
    static translation to 67.103.180.197
    translate_hits = 33494, untranslate_hits = 22697
  match ip inside 192.168.1.0 255.255.255.0 outside any
    dynamic translation to pool 1 (67.103.180.195)
    translate_hits = 234668, untranslate_hits = 14019
  match ip inside 192.168.1.0 255.255.255.0 inside any
    dynamic translation to pool 1 (No matching global)
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.1.0 255.255.255.0 DMZ any
    dynamic translation to pool 1 (192.168.2.1 [Interface PAT])
    translate_hits = 1758, untranslate_hits = 11

NAT policies on Interface DMZ:
  match ip DMZ host 192.168.2.42 outside any
    static translation to 67.103.180.198
    translate_hits = 2096, untranslate_hits = 12108
  match ip DMZ 192.168.2.0 255.255.255.0 outside any
    dynamic translation to pool 2 (67.103.180.196)
    translate_hits = 0, untranslate_hits = 0
  match ip DMZ 192.168.2.0 255.255.255.0 DMZ any
    dynamic translation to pool 2 (No matching global)
    translate_hits = 0, untranslate_hits = 0Start Free Trial
[+][-]03.26.2007 at 09:42AM PDT, ID: 18794098

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]03.26.2007 at 10:15AM PDT, ID: 18794358

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]03.26.2007 at 10:21AM PDT, ID: 18794403

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]03.26.2007 at 10:57AM PDT, ID: 18794663

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]03.26.2007 at 11:04AM PDT, ID: 18794720

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]03.26.2007 at 02:15PM PDT, ID: 18796066

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]03.26.2007 at 02:28PM PDT, ID: 18796154

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]03.26.2007 at 02:32PM PDT, ID: 18796183

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]03.26.2007 at 02:41PM PDT, ID: 18796226

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]03.26.2007 at 03:20PM PDT, ID: 18796412

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]03.26.2007 at 03:21PM PDT, ID: 18796418

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]03.26.2007 at 03:33PM PDT, ID: 18796454

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]03.26.2007 at 03:36PM PDT, ID: 18796466

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]03.26.2007 at 05:21PM PDT, ID: 18796903

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]03.27.2007 at 06:49AM PDT, ID: 18799807

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]03.27.2007 at 08:25AM PDT, ID: 18800620

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]03.27.2007 at 10:04AM PDT, ID: 18801468

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]03.27.2007 at 11:00AM PDT, ID: 18801965

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]03.27.2007 at 11:50AM PDT, ID: 18802481

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]03.27.2007 at 12:02PM PDT, ID: 18802577

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]03.27.2007 at 12:12PM PDT, ID: 18802655

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]03.27.2007 at 12:20PM PDT, ID: 18802740

View this solution now by starting your 7-day free trial. Setting up your free trial is quick, easy, and secure. We will return you to this solution, unlocked, when you're done.

 

About this solution

Zone: Cisco PIX Firewall
Tags: pix, untranslate_hits
Sign Up Now!
Solution Provided By: batry_boy
Participating Experts: 1
Solution Grade: A
 
 
[+][-]03.27.2007 at 01:00PM PDT, ID: 18803080

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
 
Loading Advertisement...
20081112-EE-VQP-42