PIX to PIX VPN

2000-05-17 Thread p k
I am currently testing and playing with two PIX's and trying to get 3-DES or DES VPN between them working. Does anyone have this successfully running? I think I need to fine tune my configs to work. Could you email configs to me if you do. Thanks a bunch. Paul Krihak,CCNA

PIX

2000-08-16 Thread Atif Awan
does anyone know whether a failover is a separate PIX box or is it the same box with a different software ? Regards Atif ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http

PIX

2000-08-31 Thread Cisco Cisco
Somebody told me that a PIX can be built by using common PC components. I have the PIX OS and would like to build a box for home use only to study on. Does anybody know or heard how to do this? I would love to buy a real PIX but my budget is really tight right now - I am sure many of you

pix

2000-09-11 Thread SH Wesson
I am using a Cisco PIX 520 with an inside interface and an outside interface. I have the following scenario: Internal server has an address of 10.10.1.150, the external server has an ip address of 128.200.111.100. The external server is in the dmz zone. The internal server has been

PIX to PIX VPN [7:5920]

2001-05-25 Thread Anthony
Has anyone experience any problems with their PIX to PIX vpn? It seems that mine tends to go down much more often than I like, forcing me to clear the IPSEC and ISAKMP SA's. Any ideas or suggestions? Thanks Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=59

pix vpn to non-pix vpn

2000-08-04 Thread Mike Shannon
Has anybody configured a pix for vpn access to a non-pix firewall for vpn access so there is a vpn between the pix and the non-pix? Sonicwall claims they can do this. If so do you have a sample config? Thanks Mike. ___ UPDATED Posting Guidelines: http

Re: PIX to PIX VPN [7:5920]

2001-05-25 Thread Allen May
I'd need to see the configs (take out any sensitive info first). I haven't had any problems with any of ours that wasn't caused by human intervention ;) - Original Message - From: "Anthony" To: Sent: Friday, May 25, 2001 11:25 AM Subject: PIX to PIX VP

Re: PIX to PIX VPN [7:5920]

2001-05-25 Thread Jonathan Hays
I don't have any details, but I've had customers complain that PIX-PIX VPNs I have set up quit working under heavy traffic loads. -Jonathan Allen May wrote: > I'd need to see the configs (take out any sensitive info first). I haven't > had any problems with any of

RE: PIX to PIX VPN [7:5920]

2001-05-25 Thread JoJo Aricat
Which version of software are you running ??? Check out this bugid CSCds53316, if you are running 5.2.3. -Original Message- From: Jonathan Hays [mailto:[EMAIL PROTECTED]] Sent: Friday, May 25, 2001 12:25 PM To: [EMAIL PROTECTED] Subject: Re: PIX to PIX VPN [7:5920] I don't hav

PIX user Authentication PIX/TACACS [7:32684]

2002-01-21 Thread Marcos Casado Castaño
Hi, I'm configuring a PIX firewall to authenticate telnet from our engineering staff users (each one of us have a TACACS+ username and password). Everyhing works fine, except that the PIX prompts for the local password (passwd ) before consulting TACACS. Does anyone know if

RE: pix vpn to non-pix vpn

2000-08-08 Thread Chris Larson
: Friday, August 04, 2000 3:47 PM To: [EMAIL PROTECTED] Subject: pix vpn to non-pix vpn Has anybody configured a pix for vpn access to a non-pix firewall for vpn access so there is a vpn between the pix and the non-pix? Sonicwall claims they can do this. If so do you have a sample config? Thanks Mike

PIX 520 and PIX-4FE [7:60250]

2003-01-03 Thread Symon Thurlow
Hi, Trying to find out if the PIX-4FE will work in a 520. Cisco's site no longer has any 520 info because it is EOL. Anyone help? Cheers, Symon Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=60250&t=60250 ---

PIX to PIX ISAKMP Policy ... [7:53082]

2002-09-11 Thread Paul
Hi .. I have setup site to site from a 506 to a 515 this all works fine ... I now want to set up another site site from a 501 to the same 515 ... When doing so ... can I use the same ISAKMP policy that I already created on the 515 PIX ??? If so ... do I just add another 'ISAKM

**Pix Firewall

2001-02-09 Thread Deepak Sharma
does anyone have any prices on PIX firewalls?520, 525, and 535. Im looking to buy, but I cant find prices on the cisco website.if someone has them in Canadian dollors, that'll be awesome! thanks Deepak _ FAQ, list archives, and subscription info:

PIX questions

2001-02-14 Thread Nabil Fares
Greetings all, Would like to know if its possible to allow certain users to issue certain commends on a pix box. I use SSH to access the box, and some users only require read access. Is this even possible with pix? I checked the documentation with no luck. Running version 5.3 Thanks, Nabil

PIX firewall

2001-02-15 Thread Deepak Sharma
quick question, and probably dumb question!!. when I set up a pix firewall user--56k dialup-->pix--nt server to authenticate the user, does pix use NT auth. or another type of auth.username/password has to be setup within pix... tha

PIX SSH

2001-02-26 Thread Gil Shulman
Hi all, A couple of weeks ago I have red on this mailing list that remote connection to the PIX firewall is possible not only through IPSEC tunnels but also by using SSH. If so I will appreciate it if someone will send me a brief explanation about how it is done and a configuration example

pix nat

2001-03-02 Thread Rick Holden
Can someone please tell me what is wrong with this config access-list nonat permit ip 192.168.1.0 255.255.255.0 192.168.2.0 255.255.255.0 nat (inside) 0 access-list nonat global (outside) 1 172.16.10.50 255.255.255.255 I get no translation at all. I have permit ip any any access lists on both in

PIX Classic

2001-03-05 Thread Avila, James
Hi all, Has anyone ever upgraded a PIX "classic?" THanks in advance jim avila _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

PIX question

2001-03-06 Thread Allen May
I have a PIX using IPSec for a VPN tunnel between 2 networks. On the outside interface is a box using SYSLOG trying to write to a box on the inside interface. I made an external static IP for the internal box, added a conduit to permit udp-syslog...nothing. Tried adding access-list # permit

PIX Performance

2001-03-15 Thread IanRaker
Hello everyone. Here is the situation. A client of mine plans on setting up some DMZs off either a PIX 515 or 525. Servers will consist of smtp relay, ftp, 2 to 4 web servers, 2 OWA servers, and 5 to 10 web app servers. Inside (the internal LAN), there are about 10 servers, some database

PIX problem

2001-03-19 Thread Sam
Hello Group, I am having trouble figuring out a small issue with a PIX firewall. It is running ver 4.4(5). After entering the approriate static and conduit (WWW) commands, I tried accessing the host from our internal network using the external address and I was not able to. I then tested from a

Pix Problem

2000-11-21 Thread Vincent
Hi; Have a very strange PIX problem. 1) I opened port 20, 21, 28 in the cofiguration of PIX firewall, able to access FTP server thru window under DOS prompt. The problem is that I can't able to retrieve file thru web browser. Let say, I can even ge

PIX problem?

2000-12-01 Thread Dinesh B
Hi.. I am trying to make a connection to a remote server ( WAN link) from my LAN. The remote end has made configuration to allow my desktop to do a telnet to it. The setup is like this. PC(172.18.10.1) -- PIX ( 172.18.0.1)-Router ---WAN link Remote server ( 165.132.0.1). The

PIX failover

2001-01-02 Thread Florin Mechetiuc
I have couple of 520 firewalls ordered a while back but I don't know if is a way to check if they are in failover bundle. To be more specific , I have one up and running but I would like to install the failover and I don't which one is ( I have other three ordered for other projects). I think it m

Pix FireWall

2001-01-08 Thread Abro Toufic
Dear Sir, I have a small question about Pix Firewall and syslog, what I am looking for any web browser reporting tools can I use it and some thing like that any comment any help thanks _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list

Learning PIX??

2000-09-30 Thread JD
Hello, I want to get into the Network Security side of things, right now I am about to test for Checkpoint, I have my MCSE,CCNA and know VPN pretty well, but how do I learn PIX, Is there a book that is recommended or anything like that? I unfortunately don't have access to a PIX firewall

PIX training...

2000-10-04 Thread Derrenbacker, L. Jonathan
Can someone recommend a good recource for learning the PIX firewall.   I heard someone say something about a cdrom from cisco, but I haven't seen anything like that.   Thanks, Jon

PIX Question

2000-10-09 Thread oluwakemi ojo
application server. What is the way forward on this issue considering that the network is isolated from the internal network that has DNS Server, which can resolve the IP address to domain name? Is there a way to specify an alias on the PIX to resolve the IP address to a domain name

PIX Question

2000-10-09 Thread oluwakemi ojo
application server. What is the way forward on this issue considering that the network is isolated from the internal network that has DNS Server, which can resolve the IP address to domain name? Is there a way to specify an alias on the PIX to resolve the IP address to a domain name

PIX Question

2000-10-11 Thread oluwakemi ojo
application server. What is the way forward on this issue considering that the network is isolated from the internal network that has DNS Server, which can resolve the IP address to domain name? Is there a way to specify an alias on the PIX to resolve the IP address to a domain name? Regards

PIX Question

2000-10-12 Thread oluwakemi ojo
application server. What is the way forward on this issue considering that the network is isolated from the internal network that has DNS Server, which can resolve the IP address to domain name? Is there a way to specify an alias on the PIX to resolve the IP address to a domain name? Regards

PIX question***************

2000-10-20 Thread Peter Gray
In the PIX firewall I have to allow one internal address to access one external address on a specific port. I am using PIX Ver 4.4. And the outbound statement only allows either source or destination. Is there any way I can do it..? Thanks

PIX question

2000-10-28 Thread Jim Bond
Hello, Is there any way to have outside users access an internal subnet? I see from CCO that you can only have ouside users access a particular internal host. Thanks in advance. Jim __ Do You Yahoo!? Yahoo! Messenger - Talk while you surf! It's

PIX question

2000-10-31 Thread Syamsul
Hi everybody, I have one PIX firewall running v 4.2(4). Based on the config, i've specified only a few user can go out to internet. But, my problem is when a user running on NT w/s or server, they can go out to internet while not for users running on win95. Anybody experienced the pr

PIX Help

2000-11-09 Thread Austin
I am using a static mapping on the pix for an inside illegal address to an outside legal address. I want to allow the inside machine to be pinged from the outside as well as allow http traffic to that machine. Lets say the inside address is 10.1.1.5 and the internet legal address is 45.33.20.5

PIX QUESTION********

2000-11-10 Thread Peter Gray
I am using PIX 515 IOS ver 4.4. I have to allow only one inside user to access an Internet address on a particular port. I am using outbound statement with except to do this. But it is not working. Can anyone put some light on that. Here is what I am doing: A user from 10.6.x.x subnet needs

PIX question

2000-11-12 Thread SH Wesson
In regards to a pix, I have the following question. When I'm trying to restrict access from the inside to the dmz, how would I do that and can you give some examples. For example, do I use an access list or an outbound command and what are the differences between the two. In additio

PIX VPNs

2000-11-20 Thread Austin
I am looking for sample configs on PIX to PIX VPNs. _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

monitoring PIX

2001-03-22 Thread Florin Mechetiuc
Hi all, Do you guys know a tool that you can monitor a PIX firewall with? I mean something that you can monitor memory , CPU, bandwidth usage, etc... Thanks, Florin Mechetiuc [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http

PIX CPU

2001-04-03 Thread Scott M. Trieste
Is there a "sh proc cpu" command on the PIX or something similar? I am curious to know if a certain process is killing my CPU. Thanks in advance. Best Regards, Scott M. Trieste _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/

PIX Problem

2001-04-04 Thread AS
Hi all I have PIX 520 installed in my network the problem is that if i try to do certain thing without firewall i mean directly try to acces resources it takes 3 minutes to do it but if try to use fireall instead the time increases double fold ..i.e. 6 minutes .Can anyone help with that

PIX Firewall

2001-04-09 Thread Vellaiyan, Manohar (CTS)
Hi Everyone, Has anyone undergone the Cisco Secure PIX Firewall Advanced certification ? If so can you guide me on taking this certification in terms of study materials etc. Thanks in advance. You can mail me at [EMAIL PROTECTED] Regards, V.Manohar This e-mail and any files transmitted

PIX Deny

2000-07-21 Thread Steve Smith
Hey guys and girls what is the syntax to block an ip address using the deny statement? Thanks in advance! Steve Steve Smith.vcf

PIX Questions

2000-08-01 Thread Peter Gray
What is the difference b/w these 2 commands: conduit permit tcp any 22.0.41.0 255.255.255.0 eq 411 conduit permit tcp any eq 411 22.0.41.0 255.255.255.0 What does the following lines mean: conduit permit icmp host 195.210.22.4 any echo-reply conduit permit icmp host 195.210.22.4 any echo What do

Re: PIX

2000-08-16 Thread bellis
Ive done it before with the same pix box, same software...and Ive done it with different pix flavors and same software...they seem pretty interchangable. I was told by Cisco that they do not recommend interchanging pix versions for fail-overs...as long as your interfaces are the same, I cant see

Re: PIX

2000-08-17 Thread Atif Awan
Thanks ... i will check it out .. Regards Atif -Original Message- From: [EMAIL PROTECTED] <[EMAIL PROTECTED]> Newsgroups: groupstudy.cisco To: [EMAIL PROTECTED] <[EMAIL PROTECTED]> Date: Thursday, August 17, 2000 7:17 AM Subject: Re: PIX >Ive done it before with the sam

RE: PIX

2000-08-17 Thread Darren Johnson
Maybe I misunderstood you original question if so then you have your answer if not... Yes, it is a completely different box connected through the failover cable to the primary PIX. It should be the same version of software as if you are running a fairly complex config you will probably have some

RE: PIX

2000-08-17 Thread Gils
Hi, PIX's failover is the same box and the same software but different activation key. GIL CCNA CCDA -Original Message- From: Atif Awan [mailto:[EMAIL PROTECTED]] Sent: Wednesday, August 16, 2000 11:24 PM To: [EMAIL PROTECTED] Subject: PIX does anyone know whether a failover

Re: PIX

2000-08-17 Thread Ing. Francisco Quiroz Collazo
For failover you need two pix's, with the same software (version), and the same configuration of hardware (#, and type of ports), and a special cable for failover. The pin out of this cable is available in pix docummentation. - Original Message - From: <[EMAIL PROTECTED]>

Pix VPN

2000-08-23 Thread Price, Jamie
Title: Pix VPN Hi Guys, Although the Pix is not on the R&S lab i am hoping someone can help me out. I want to set up a Pix to Pix VPN (I admit this is a real lifer - I have a client that wants a VPN between Pixs to their client).  I want traffic from all hosts on site A to be encry

PIX configuration

2000-08-27 Thread SH Wesson
My network is as follows: Ethernet Segment ---|PIX||RTR|--OUT TO INTERNET INTERNAL DMZ EXTERNAL I have a few servers out in the DMZ zone. How and what is the standard for security configuration for the PIX and the RTR (router). Is the RTR

PIX configuration

2000-08-28 Thread SH Wesson
My network is as follows: Ethernet Segment ---|PIX||RTR|--OUT TO INTERNET INTERNAL DMZ EXTERNAL I have a few servers out in the DMZ zone. How and what is the standard for security configuration for the PIX and the RTR (router). Is the RTR

RE: PIX

2000-08-31 Thread William E Gragido
No kidding, well, I don't know...the quick reference guides never really go too far in detail and I have never seen anyone rip a pix apart just to see what makes it tick. I am guessing that its not the case though considering Cisco's priclivity towards the RISC processors etc. I som

Re: PIX

2000-08-31 Thread Lorenzo Montezemolo
I have ripped a PIX apart and it is a Pentium PC with a flash device for storage. Oh, it also has a floppy drive, which must be why it's so expensive ;-) Actually, Cisco is perfectly happy to overcharge for parts that you could find elsewhere. One such example is RAM: Cisco charges $120

Re: PIX

2000-08-31 Thread Travis Gamble
Nope, the Pix is Intel based. Unfortunately, you would need to have exactly the same motherboard, NICs and everything in between. Probably is possible, but you'd need pretty detailed information. Travis Gamble - Original Message - From: "William E Gragido" <[EM

Re: PIX

2000-08-31 Thread 2easy
I have 2 PIX Classics and a new PIX 506. I Opened the PIX classic, and it has a Pentium 133 inside, and probably a lot of proprietary BIOS stuff. The new 506, that has only been out since July this year is a Pentium 200. Haven't opened it yet. But looking inside the Classic, true it is

Re: PIX

2000-09-01 Thread Chris Larson
This is an interesting question. The PIX is Intel Processoe based though. The OS is proprietary and not based on any UNIX or other well knwon kernel. It is hardened. YOu would also have to be able to load a bootstrap loader onto the PC. It would be interesting if you got this to work. Please keep

RE: PIX

2000-09-01 Thread Craig Johnson
In my experience, as long as you use identical hardware (NIC's, motherboard) and use the PIX flash card, I see no reason why it wouldn't work just fine. The ones I've worked with was a Pentium Pro mobo (Intel VS440FX) and a Pentium II mobo (Intel AL440LX). If you use those, I se

Re: PIX

2000-09-04 Thread Lorenzo Montezemolo
It uses Intel NICs. ""Craig Johnson"" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... | In my experience, as long as you use identical hardware (NIC's, motherboard) | and use the PIX flash card, I see no reason why it w

RE: pix

2000-09-12 Thread Gils
that IP address can be reach but the appropriate conduit. This is the way I usually do it. GIL CCNA,CCDA -Original Message- From: SH Wesson [mailto:[EMAIL PROTECTED]] Sent: ??? ??? 11 ?? 2000 13:14 To: [EMAIL PROTECTED] Subject: pix I am using a Cisco PIX 520 with an inside inte

Re: pix

2000-09-12 Thread Kristopher B. Climie
hat I wrote actually say that IP address can be reach > but the appropriate conduit. > This is the way I usually do it. > > >GIL > CCNA,CCDA > > -Original Message- > From: SH Wesson [mailto:[EMAIL PROTECTED]] > Sent: ??? ??? 11 ?? 2000 13:14 > To: [EMAI

Re: pix

2000-09-12 Thread Rodgers Moore
The PIX does it backwards to the rest of Cisco. In conduits, it's destination, source not the other way around. Rodgers Moore ""Kristopher B. Climie"" <[EMAIL PROTECTED]> wrote in message 8pl3cd$8cu$[EMAIL PROTECTED]">news:8pl3cd$8cu$[EMAIL PROTECTED].

Re: pix

2000-09-12 Thread Kristopher B. Climie
Technically, the Pix doesn't work with destination / source. The syntax is: usage: [no] conduit deny|permit [ []] [ []] conduit deny|permit icmp [] Where g = global address and f = foreign address. However, Rodgers

PIX Interface

2000-05-08 Thread ZIM
Hi Guys, Thanks for all the suggestions however I have now additionally noted the error below when attempting to utilize the wr net command for tftp. BrPix1(config)# wr net Building configuration... TFTP write 'c:\tftp' at (Inside IP Address) on interface 1 Unspecified Error __

PIX Firewall

2000-05-10 Thread Harrell, ET3
I'm trying to set up a Cisco PIX Firewall for my network and I'm having trouble with the global command for the outside interface. I'm not totally understanding exactly which ip address or which range of ip addresses i'm supposed to enter into that. I do know that the glob

PIX & VPN

2000-05-24 Thread Alex Thurber
its remote access environment to include two new concentrators, the CVPN 3000 series (formerly Altiga) and the CVPN 5000 series (formerly Compatible.)  We will continue to support remote access on the PIX & on the Cisco Secure Integrated Software (formerly Firewall Feature Set.)   The r

PIX labs?

2000-06-15 Thread Frank Jimenez
Hello groupstudy, long time no write! A query - has anyone seen a books or any other place that might have some lab configurations/questions for the PIX? I'd even settle for lab work on firewalls in general rather than PIX-specific. For some reason, my creativity seems to hit a brick

PIX Firewall

2000-06-23 Thread Farooq Ali
Can some one please point me to a url or a book which helps "administration of Firewalls". I am working on Pix firewalls, and need to learn administration/. Farooq Ali Network Engineer Global Network Operations ___ UPDATED Posting

PIX Text

2000-06-24 Thread Montgomery, Robert WARCOM Contractor
Good morning all! Aside from the text that accompanies the PIX equipment, are there any other texts that cover the PIX? Rob Montgomery CCNA MCP IA Systems Analyst Sytex, Inc./ Naval Special Warfare Command ___ UPDATED Posting Guidelines: http

PIX question

2000-06-30 Thread Jim Bond
Hello, I'm trying to study PIX. Is 506 good enough? Thanks in advance. Jim __ Do You Yahoo!? Get Yahoo! Mail - Free email you can access from anywhere! http://mail.yahoo.com/ ___ UPDATED Posting Guidelines:

RE: PIX user Authentication PIX/TACACS [7:32684]

2002-01-21 Thread Sandy Davidson
qo [mailto:[EMAIL PROTECTED]] > Sent: Monday, January 21, 2002 1:47 PM > To: [EMAIL PROTECTED] > Subject: PIX user Authentication PIX/TACACS [7:32684] > > > Hi, > I'm configuring a PIX firewall to authenticate telnet from our > engineering staff users (each one of us

Re: PIX user Authentication PIX/TACACS [7:32684]

2002-01-21 Thread David Tran
That's is NOT true. Upgrade your PIX code to version 6.1(1) and the passwd prompt will go away. I am not sure about version 6.0(1). I've been using it on model 515, 525 and 535 without problem with TACACS. Another thing, I usually take TAC advice and recommendation with a grain of sa

pix-to-pix tunnel...somebody make it work!!!

2000-08-09 Thread gwakin
no SA, no pre-shared key, NOTHING. Following the hitcount on the local PIX (running 5.1.2 software) I see my access list 100 with a hitcount of 0. Checking the remote PIX I see the same thing on access list 100- no hits. My PIX sits behind a 1605 gateway rotuer and in front of a 3640 host route

HELP!! PIX-PIX VPN config problem [7:69684]

2003-05-29 Thread Mary Kvitashvili
Trying to config PIX 506 to PIX 515 for basic VPN/IPSEC/LAN/LAN connectivity. Took the configs straight off the Cisco site but I cannot establish my tunnel at the ISAKMP level. Trying to ping from LAN to LAN. Getting the following error message from "debug crypto isakmp": HQ-PIX#

HELP!! PIX-PIX VPN config problem [7:69685]

2003-05-29 Thread Mary Kvitashvili
Trying to config PIX 506 to PIX 515 for basic VPN/IPSEC/LAN/LAN connectivity. Took the configs straight off the Cisco site but I cannot establish my tunnel at the ISAKMP level. Trying to ping from LAN to LAN. Getting the following error message from "debug crypto isakmp": HQ-PIX#

Re: PIX to PIX ISAKMP Policy ... [7:53082]

2002-09-11 Thread David Armstrong
Paul, You can have the same isakmp policy and the same crypto ipsec transform-set for all of your ipsec vpn's but will need to define a new crypto map and access-list. Remember to run isakmp disable outside BEFORE making configuration changes to your interface or you could lock up th

RE: PIX to PIX ISAKMP Policy ... [7:53082]

2002-09-11 Thread Mark W. Odette II
Heed the warning... That little tip came a little too late for me a while back and it bit me in the butt hard. I had to wait until the next morning to get someone at the remote location to give the PIX the ol' 'boot. -Mark -Original Message- From: David Armstrong [mai

Re: PIX to PIX ISAKMP Policy ... [7:53082]

2002-09-12 Thread Paul
... - Original Message - From: "Mark W. Odette II" To: Sent: Thursday, September 12, 2002 6:52 AM Subject: RE: PIX to PIX ISAKMP Policy ... [7:53082] > Heed the warning... That little tip came a little too late for me a > while back and it bit me in the butt hard. I had to wai

Re: PIX to PIX ISAKMP Policy ... [7:53082]

2002-09-12 Thread David Armstrong
map VPNMAP 30 match address vpn3 crypto map VPNMAP 30 set peer 321.123.321.1 crypto map VPNMAP 30 set transform-set VPNSET crypto map VPNMAP interface outside You might also want to download the .pdf form of the PIX manual frm CCO. It's much more comprehensive than what comes with a PIX out o

Pix to Pix Interface, nat 0 traffic? [7:1429]

2001-04-20 Thread Michael Snyder
Ok, need some help talking to group of hosts on a lower security interface from a higher one. For example. I have a fileserver on 192.168.200.0/24 on pix interface 3 security100. I want to be able to speak at will to another fileserver 192.168.100.0/24 on pix interface 2 security 90. The name

Re: pix-to-pix tunnel...somebody make it work!!!

2000-08-09 Thread Yuvaraj Venkatesan
Hi, I know the sample config on Cisco Site works. I have done PIX to Router VPN, but I am sure it shouldn't be very different. You mentioned you are doing NAT on PIX,Did you make sure the encryption domain does not get routed ? I would like to see your config. Regards. Yuvaraj. >From

RE: pix-to-pix tunnel...somebody make it work!!!

2000-08-10 Thread Chris Larson
Are you trying to use NAT with the tunnel? I find the stuff on CCO about VPN to be overkill, so I will include a piece of a Chapter on VPN I wrote for Syngress media, that I may simplify what you found on CCO for pix to pix VPN. You can take it or leave it, but the config should work just

RE: pix-to-pix tunnel...somebody make it work!!!

2000-08-10 Thread Darren Johnson
This is very well written, the only addition that I would make to it is that if the PIX is running 5.1 a couple of changes will be needed to make it work, but if you running an earlier release than it should be fine. Darren > -Original Message- > From: [EMAIL PROTECTED] [mailto:

Re: pix-to-pix tunnel...somebody make it work!!!

2000-08-10 Thread Kenneth
find the stuff on CCO about VPN to be overkill, so I will include a piece > of a Chapter on VPN I wrote for Syngress media, that I may simplify what you > found on CCO for pix to pix VPN. You can take it or leave it, but the config > should work just replace the addresses I have in th

RE: pix-to-pix tunnel...somebody make it work!!!

2000-08-11 Thread Chris Larson
OTECTED] Subject: Re: pix-to-pix tunnel...somebody make it work!!! hi chris. what's the title of this book? or isbn#? "Chris Larson" <[EMAIL PROTECTED]> wrote in message 009AE8FD8584D3119A2E0008C7F4A8492A63@WEBSERVER">news:009AE8FD8584D3119A2E0008C7F4A8492A63@WEBSERV

Re: HELP!! PIX-PIX VPN config problem [7:69684]

2003-05-29 Thread Paul McLaren
Hi, Can you post your two configs (remove private info if required)? Regards Paul ""Mary Kvitashvili"" wrote in message news:[EMAIL PROTECTED] > Trying to config PIX 506 to PIX 515 for basic VPN/IPSEC/LAN/LAN > connectivity. Took the configs straight off t

Re: HELP!! PIX-PIX VPN config problem [7:69684]

2003-05-30 Thread Mary Kvitashvili
PIX 515 PIX Version 6.3(1) interface ethernet0 10full interface ethernet1 10full nameif ethernet0 outside security0 nameif ethernet1 inside security100 enable password 8Ry2YjIyt7RRXU24 encrypted passwd 2KFQnbNIdI.2KYOU encrypted hostname HQ-PIX domain-name xxx.org fixup protocol ftp 21 fixup

Re: HELP!! PIX-PIX VPN config problem [7:69684]

2003-05-30 Thread Paul McLaren
Mary, Ok I see your configs. Can I ask how you have this set up? PIX's, routers etc and how they are connected. My initial concern is that some of your external ip's are private (192.168.1.2) on PIX506. Try this test first of all to ensure basic connectivity from the command line o

Pix Firewall Issue

2001-02-07 Thread exchange
Hi Gang, I have a Pix Firewall 520 and wondered if this was a feature or a configuration issue on my firwall. We have an entire class C address say 208.184.23.x to use for our network. We use the 192.168.1.x network for our internal network. I am having problems pinging a machine's Intern

Pix static NAT

2001-02-09 Thread Todd Plambeck
Is there a way to statically nat multiple outside address to the same inside address? I have tried, with multiple static commands, but the Pix responds in error. Example: static (inside,outside) X.X.X.1 192.168.10.19 netmask 255.255.255.255 0 0 static (inside,outside) X.X.X.2 192.168.10.19

Re: **Pix Firewall

2001-02-10 Thread ML
Try www.CDW.com, but I think a 525 runs about 14-20K but that is not with redundany or additional Net cards.. Deepak Sharma <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > does anyone have any prices on PIX firewalls?520, 525, and 535.

PIX for sale

2001-02-13 Thread Moe Tavakoli
I just finished up a couple projects and the clients have soem PIX boxes left over for sale. The include: Some PIX 520URs. They have been oppened and tested, but never used. In brand new condition $8,000. Some PIX 525FOs. They are still sealed int eh box. $2500. I was asked to sell them

Re: **Pix Firewall

2001-02-14 Thread Jason
Cisco has a $2k off deal for the 525 going on right now: " PIX 525 Firewall $2000 Instant Rebate Available through March 31, 2001 Now through March 31, 2001, resellers can get a $2000 instant rebate through US distribution on the Cisco Secure PIX 525 Firewall. The Cisco Secure PIX 525 Fir

PIX, VPN & DHCP

2001-02-15 Thread Greg Reaume
Hi All, I was wondering if it's possible to forward DHCP packets through a PIX-PIX VPN tunnel? I have 1 DHCP server and would like to start using it for my branch offices seeing as they have more problems with DHCP and no IT staff to support it. I haven't found any documentation on

Re: PIX firewall

2001-02-15 Thread Jason
The PIX can use internally stored pre-shared keys, or can use external authentication such as TACACS+. http://www.cisco.com/warp/public/700/configsec.html -- Jason Roysdon, CCNP+Security/CCDP, MCSE, CNA, Network+, A+ List email: [EMAIL PROTECTED] Homepage: http://jason.artoo.net/ Cisco

RE: PIX firewall

2001-02-16 Thread Hyman, Craig
I have a question about the pix firewall.. I have a network with a couple of devices on it. Here is the network: Frame > router---> netra t1----> PIX firewall---> Switch--> The switch is where the netra t1 and the router and firewall are connected. When I reboot my n

Re: PIX firewall

2001-02-16 Thread haroldnjoe
deal with one user database. [EMAIL PROTECTED] ""Jason"" <[EMAIL PROTECTED]> wrote in message 96ikbs$uka$[EMAIL PROTECTED]">news:96ikbs$uka$[EMAIL PROTECTED]... > The PIX can use internally stored pre-shared keys, or can use external > authentication such as

Re: PIX firewall

2001-02-16 Thread The.rock
exist anyway. I hope it's true. It would be nice to only have to deal > with one user database. > > [EMAIL PROTECTED] > > ""Jason"" <[EMAIL PROTECTED]> wrote in message > 96ikbs$uka$[EMAIL PROTECTED]">news:96ikbs$uka$[EMAIL PROTECTED]... >

PIX, VPN & DHCP

2001-02-19 Thread Greg Reaume
Hi All, I was wondering if it's possible to forward DHCP packets through a PIX-PIX VPN tunnel? I have 1 DHCP server and would like to start using it for my branch offices seeing as they have more problems with DHCP and no IT staff to support it. I haven't found any documentation on

  1   2   3   4   5   6   7   8   9   10   >