Link to home
Start Free TrialLog in
Avatar of MrWhitefolks
MrWhitefolks

asked on

Pix problem

I jut got in a new Pix 501 and am having a problem. I want to change the IP addresses of both the outside interface and the inside interface. I can change the outside IP address fine, but after I change the inside interface and save I lose connection. I am then unable to connect to the admin interface using the new IP address even though I have given my address range permissions to use the web based admin console. What am I missing?
Avatar of sh00t3r
sh00t3r

1. Make sure your typing in https, not http
2. You may have to add http functionality on the edited interface.

whoop gotta run brb
can you ping the new IP address after you change it ?
How are you connected to the PIX when you try to change the inside interface IP?  If not via a console cable, that would explain your troubles.
Avatar of MrWhitefolks

ASKER

I am connected via ethernet cable and change the interface via HTTPS. Once I get it changed I am able to ping the new ip address, so I know the change worked,  but I can not get the admin console to display. I am typing httpS://
Also I disabled DHCP on the inside interface and deleted the address range that was listed. Do I need to add a new network under the hosts/networks tab? because I did add 10.20.0.0 / 255.255.0.0 (int) inside.
I bought a pix not too long ago for the first time. (What a horrible mistake).
I changed a setting like you are talking about and lost internet access.
The cisco engineer told me to turn off the router and turn it back on.  (Power cycle it) and that worked.  I couldnt believe it, what mickey mouse crap was that??  There was no command to fix it, just turn it off and turn it on.

Im not sure if this will fix your problem, but I needed to vent.  And if it does fix it.  Well, there you go. ;)
That's one of the silliest things I've heard in a while.
Make sure to clear your temp internet files and cookies!!!
ASKER CERTIFIED SOLUTION
Avatar of Les Moore
Les Moore
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
By the way, having to reboot is not silly. It clears the arp cache. Otherwise, you still have an arp table that holds the old IP address to the MAC addresses of the workstations...
Techs often find it easier to say "reboot" than to walk someone through clearing the arp cache and try to explain what it all means..

My syntax was inorrect in my last post:

you should see something like:

http <old subnet> <mask> inside

and you need to add
http <new subnet> <mask> inside

lrmoore,

Thanks for the lesson on arp cache but that wasn't the silly part.  Saying that buying a PIX was a mistake and that the reload was mickey mouse crap just because he doesn't know how to use it was the silly part.
agree. There is nothing micky-mouse about a PIX...

- Cheers!
The pix is a mistake for anyone who wants to use a GUI only.  I stand by that statement.  Ive worked with Sonicwall and it never needed to be rebooted to clear anything.  So a cisco engineer saying to reboot rather than go through (how many commands does it take) the process of clearing the cache is retarded.

Try using the pix from scratch for a real setup without the command line.  Its alomost impossible.