PIX 506E config problems - PIX can connect to internet but NAT'ed computers can't
Posted on 2004-09-20
I'm setting up my first PIX 506E and I'm having problems getting connectivity for the test computer I have behind it. The PIX itself can ping external hosts, but the computer behind the PIX can't. I've read through some older postings of others trying to set up a PIX for the first time, but I'm still stuck.
My test computer does have its gateway set to the PIX's internal IP so I don't think that's a problem. I created a static route on the PIX for 0.0.0.0 0.0.0.0 to point to my router's public IP and that allowed the PIX itself to ping external hosts but nothing for my test computer.
I turned on console logging and when I ping a domain on the internet the PIX logs openings in the firewall for UDP traffic coming back from DNS queries, but no IP comes back and no denied errors appear in the console log.
Let me know if you need to see my config to try and troubleshoot.