I thought global was only applied outside ... I have misunderstood something?
Pierre-Alex -----Original Message----- From: Tribavan Raina [mailto:[EMAIL PROTECTED]] Sent: Monday, December 10, 2001 3:24 PM To: 'Pierre-Alex Guanel' Cc: '[EMAIL PROTECTED]' Subject: RE: PIX Configuration [7:28631] hi.. you need to change this command.. global (outside) 1 209.152.115.125 to global (inside) 1 209.152.115.125 .. this will solve your problem.. tribavan -----Original Message----- From: Pierre-Alex Guanel [mailto:[EMAIL PROTECTED]] Sent: Tuesday, 11 December 2001 9:23 a.m. To: [EMAIL PROTECTED] Subject: PIX Configuration [7:28631] >From a client (inside) I can ping the inside interface of the PIX . >From a client (outside) I can ping the outside interface of the PIX. However no (inside) client manages to ping or do any sort of traffic with hosts outside the PIX. Do you spot where my problem is? Thank you!!! BTECHPIX# sh config : Saved : PIX Version 5.1(2) nameif ethernet0 outside security0 nameif ethernet1 inside security100 enable password encrypted passwd encrypted hostname BTECHPIX fixup protocol ftp 21 fixup protocol http 80 fixup protocol h323 1720 fixup protocol rsh 514 fixup protocol smtp 25 fixup protocol sqlnet 1521 names access-list acl_ping permit icmp any any pager lines 24 logging on no logging timestamp no logging standby no logging console no logging monitor no logging buffered no logging trap no logging history logging facility 20 logging queue 512 interface ethernet0 auto interface ethernet1 auto mtu outside 1500 mtu inside 1500 ip address outside 209.152.115.123 255.255.255.0 ip address inside 192.168.3.1 255.255.255.0 no failover failover timeout 0:00:00 failover ip address outside 0.0.0.0 failover ip address inside 0.0.0.0 arp timeout 14400 global (outside) 1 209.152.115.125 nat (inside) 1 0.0.0.0 0.0.0.0 0 0 route outside 0.0.0.0 0.0.0.0 209.152.115.1 1 timeout xlate 3:00:00 conn 1:00:00 half-closed 0:10:00 udp 0:02:00 timeout rpc 0:10:00 h323 0:05:00 timeout uauth 0:05:00 absolute aaa-server TACACS+ protocol tacacs+ aaa-server RADIUS protocol radius no snmp-server location no snmp-server contact snmp-server community public no snmp-server enable traps floodguard enable isakmp identity hostname ......... Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28757&t=28631 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
