Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

How do I configure PIX 506E to allow Internet connection for a new HP DL360 G6 (Windows 2003 or Windows 2008)?

Posted on 2010-01-11
5
Medium Priority
?
325 Views
Last Modified: 2012-05-08
We installed Windows 2008 on a newly acquired HP DL360 G6 server and it only allowed local only access.  Tried with Windows 2003 with same result.
Couldn't ping the default gateway which is the internal interface of the PIX 506E firewall.  Local access to other servers on the internal network was fine.

Brought the server to another environment with PXI 515E as the firewall and had no trouble getting through to the Internet.   Has anyone seen this?
0
Comment
Question by:technoficient
  • 2
  • 2
5 Comments
 
LVL 33

Expert Comment

by:MikeKane
ID: 26292443
If the host can't ping the local gateway but can ping other internal hosts... then it sounds like cabling is fine.  

Is the new server on the same VLAN/physical subnet  as the gateway you are trying to ping.    If there is a managed switch between the server and gateway, the switch could have an ACL or other restrictions.  

CAn the internal hosts ping the gateway?   CAn the gateway ping the server?    Does the gateway allow ICMP packets at all?  

What kind of gateway is it?
0
 
LVL 28

Expert Comment

by:asavener
ID: 26295510
Shut down a working machine, and temporarily assign it's address to the new server.

Double-check your subnet mask.

Verify that the default gateway is on the same subnet as the device that is attempting to access the Internet.

Verify that you get an ARP response from the PIX.  (run "arp -a" on the server, look for the IP address of the PIX)

Verify that the PIX gets an ARP response from the server.  (run "show arp" on the PIX, look for the IP address of the server)
0
 

Accepted Solution

by:
technoficient earned 0 total points
ID: 26296105
The PIX 506E is running an old version of the pix software.  The unit is over 8 years old.  We are planning to replace it within the next few days.  Thanks for all the pointers.
0
 
LVL 33

Expert Comment

by:MikeKane
ID: 26296483
So is there anything we can assist with?
0
 

Author Comment

by:technoficient
ID: 26420540
Please close question as the issus had been fixed by replacing the unit.

Thanks
0

Featured Post

Get quick recovery of individual SharePoint items

Free tool – Veeam Explorer for Microsoft SharePoint, enables fast, easy restores of SharePoint sites, documents, libraries and lists — all with no agents to manage and no additional licenses to buy.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article is in regards to the Cisco QSFP-4SFP10G-CU1M cables, which are designed to uplink/downlink 40GB ports to 10GB SFP ports. I recently experienced this and found very little configuration documentation on how these are supposed to be confi…
Considering cloud tradeoffs and determining the right mix for your organization.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Both in life and business – not all partnerships are created equal. Spend 30 short minutes with us to learn:   • Key questions to ask when considering a partnership to accelerate your business into the cloud • Pitfalls and mistakes other partners…

577 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question