My cisco pix problem

Soldato
Joined
18 Oct 2002
Posts
5,832
Location
Liverpool :-)
I'm hoping someone can point me in the right direction, because this has me stumped!

Today we've moved into a serviced office, ie someone else has setup the network etc etc.

They have a public ip translated into a 192.168 for us, because they know we have a pix 501, exchange server etc. Previously in our old office, the pix had a public ip on the outside interface and the private ip on the inside and worked fine.

I've set the outside interface to the address i'm told to use .254, but i'm getting no internet traffic. When i'm connected via the pdm, i can ping the gateway on the outside interface and ping pc's on the inside interface.

Im missing something, does it need any private to private nat commands?

HELP!

Ps. Hope that makes sense, i've been moving furniture, servers and stuff all day and i'm knackered!
 
You do have access-lists set up don't you?

EDIT: can you log into the CLI and get us an output of the current running config and post it up here (PDM is the suxorz)?
 
We do in a basic form, ie let all www traffic through.

Do we need specific lists for private to private?

I've also tried to set a static route to the outside, that didnt work either
 
post us your show run from the pix, also let us know your lan range ie 192.168.0.0/24 & the wan ip you have been given.
I am assuming that they have forwarded all traffic from w.a.n.ip to the 192.168.x.254 address?
Please dont xxxx out too much (if any!) as it makes it hard to advise :)
 
Im missing something, does it need any private to private nat commands?

It will need some kind of NATing, unless they have given you enough IPs to NO-NAT all your internal addresses.

As m_cozzy says, we need to see your config really to be able to see the problem.
 
I havent got the config at the moment, but it's only in a basic format at the moment, with ipsec setup and some forwarding rules ie smtp, https, www to all

Yes all wan traffic is forwarded to the internal ip

What sort of nat statements would i need for internal to internal?

Edit: I've just found this, i think this is what's missing, code at the bottom of the first page

http://www.ciscopress.com/articles/article.asp?p=25326
 
Last edited:
Back
Top Bottom