PIX 501 to linksys router to cable modem configuration help

Posted on 2006-05-05
Last Modified: 2010-04-09
Currently I have a cable modem connected to a linksys router with one PC coming off the router.  I would like to add a PIX 501 to the mix because I have other hosts that will need to be protected.  My linksys has a local address and the machine off the router is respectively (fully capable of getting out to the internet).  I used a cross over cable to connect the router to the uplink port on the pix.  The outside interface on the PIX is configured as and the inside interface is  I used a route statement of 1.  Since the PIX has 4 switch ports i plugged a laptop into one of the ports and gave it an ip address of  I disabled NAT for now using NAT (inside) 0 0 0 for testing purposes.  I'm not too sure what to do from here? I'd like to get this internal laptop to be able to access the internet and to be able to talk to the PC on the DMZ (and vice versa).  Any suggestions?
Question by:lewylupo
    LVL 9

    Accepted Solution

    Well you have two options:

    1) On your linksys, you have to add the on your NAT list and then add a static route for the pointing back to the PIX ( If you want bidirectional communication between the
    PC behind the PIX and the PC on the DMZ ( I am assuming the DMZ you are referring to are host on the
    you need to change the NAT 0 to Static NAT and add some access-rules depending on what type of traffic you want to exchange between the two networks.

    no nat (inside) 0
    static (inside, outside) netmask
    access-list 101 permit ip
    access-group 101 in interface outside

    2) If you don't want to modify your linksys configuration, then you can just do static NAT and access-rule. Just allocate
    an IP from the that is not being used and define the static statements manually. Of course this won't be feasible if you have tons of host.


    static (inside, outside) netmask
    static (inside, outside) netmask
    static (inside, outside) netmask


    Author Comment

    Thanks for your help!  I got it to work using your 1st option.

    Featured Post

    Looking for New Ways to Advertise?

    Engage with tech pros in our community with native advertising, as a Vendor Expert, and more.

    Join & Write a Comment

    When I upgraded my ASA 8.2 to 8.3, I realized that my nonat statement was failing!   The log showed the following error:     %ASA-5-305013: Asymmetric NAT rules matched for forward and reverse flows It was caused by the config upgrade, because t…
    I recently attended Cisco Live! in Las Vegas, a conference that boasted over 28,000 techies in attendance, and a week of hands-on learning hosted by a solid partner with which Concerto goes to market.  Every year, Cisco displays cutting-edge technol…
    In this seventh video of the Xpdf series, we discuss and demonstrate the PDFfonts utility, which lists all the fonts used in a PDF file. It does this via a command line interface, making it suitable for use in programs, scripts, batch files — any pl…
    Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…

    728 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    21 Experts available now in Live!

    Get 1:1 Help Now