Hi everyone,
I have an environment where the current setup is the following:
ISP->Linksys 5 port switch->Cisco PIX506E->3COM SuperStack 3 (3C16465C)->devices
The only reason the Linksys 5port switch is in the picture is that there 2 more 3COM switches being used at one point. I want to remove the Linksys out of the picture and connect directly to the T1 device. My problem is that once it is removed from the middle, I cannot ping the outside world. LAN network pings and responds fine, but no WAN connectivity. I have a feeling the routing inside the PIX isn’t correct but I’m not sure exactly what to change so that it routes correctly without the Linksys switch.
****Here is the current config****
PIX Version 6.3(5)
interface ethernet0 100full
interface ethernet1 100full
nameif ethernet0 outside security0
nameif ethernet1 inside security100
enable password Mjo5gnCJK0XdI16A encrypted
passwd 2KFQnbNIdI.2HLKU encrypted
hostname pix
clock timezone EST -5
clock summer-time EDT recurring
fixup protocol dns maximum-length 512
fixup protocol ftp 21
fixup protocol h323 h225 1720
fixup protocol h323 ras 1718-1719
fixup protocol http 80
fixup protocol pptp 1723
fixup protocol rsh 514
fixup protocol rtsp 554
fixup protocol sip 5060
fixup protocol sip udp 5060
fixup protocol skinny 2000
no fixup protocol smtp 25
fixup protocol sqlnet 1521
fixup protocol tftp 69
names
access-list nonat permit ip 10.2.246.0 255.255.255.0 10.10.10.0 255.255.255.0
access-list outsideinbound permit tcp any host 216.178.82.148 eq 3389
access-list outsideinbound permit tcp any host 216.178.82.149 eq www
access-list outsideinbound permit tcp any host 216.178.82.149 eq smtp
access-list outsideinbound permit tcp any host 216.178.82.149 eq https
access-list outsideinbound permit tcp any host 216.178.82.149 eq ftp
access-list outsideinbound permit tcp any host 216.178.82.149 eq pop3
pager lines 24
icmp permit any outside
mtu outside 1500
mtu inside 1500
ip address outside 216.178.82.147 255.255.255.240
ip address inside 10.2.246.199 255.255.255.0
ip audit info action alarm
ip audit attack action alarm
ip local pool vpnpool 10.10.10.1-10.10.10.10
pdm logging informational 100
pdm history enable
arp timeout 14400
global (outside) 1 interface
nat (inside) 0 access-list nonat
nat (inside) 1 0.0.0.0 0.0.0.0 0 0
static (inside,outside) 216.178.82.148 10.2.246.201 netmask 255.255.255.255 0 0
static (inside,outside) 216.178.82.149 10.2.246.203 netmask 255.255.255.255 0 0
access-group outsideinbound in interface outside
route outside 0.0.0.0 0.0.0.0 216.178.82.145 1
timeout xlate 0:05:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h225 1:00:00
timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:00
timeout sip-disconnect 0:02:00 sip-invite 0:03:00
timeout uauth 0:05:00 absolute
aaa-server TACACS+ protocol tacacs+
aaa-server TACACS+ max-failed-attempts 3
aaa-server TACACS+ deadtime 10
aaa-server RADIUS protocol radius
aaa-server RADIUS max-failed-attempts 3
aaa-server RADIUS deadtime 10
aaa-server RADIUS (inside) host 10.2.246.201 myvpn timeout 10
aaa-server LOCAL protocol local
http server enable
http 10.2.246.0 255.255.255.0 inside
no snmp-server location
no snmp-server contact
no snmp-server community public
no snmp-server enable traps
floodguard enable
sysopt connection permit-pptp
telnet 10.2.246.0 255.255.255.0 inside
telnet timeout 30
ssh timeout 5
console timeout 0
vpdn group vpn1 accept dialin pptp
vpdn group vpn1 ppp authentication chap
vpdn group vpn1 ppp authentication mschap
vpdn group vpn1 ppp encryption mppe 128 required
vpdn group vpn1 client configuration address local vpnpool
vpdn group vpn1 client configuration dns 10.2.246.102 10.2.246.201
vpdn group vpn1 client authentication aaa RADIUS
vpdn group vpn1 client accounting RADIUS
vpdn group vpn1 pptp echo 60
vpdn enable outside
dhcpd lease 3600
dhcpd ping_timeout 750
terminal width 80
: end
Thanks in advance.