RE: Please help me with my new baby(Pix 501) [7:48760]

2002-07-17 Thread GEORGE
conduit permit icmp any any -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Juan Blanco Sent: Sunday, July 14, 2002 9:24 AM To: [EMAIL PROTECTED] Subject: Please help me with my new baby(Pix 501) [7:48760] Team, I just got my new baby Pix 501 (wow

Please help me with my new baby(Pix 501) [7:48760]

2002-07-14 Thread Juan Blanco
Team, I just got my new baby Pix 501 (wow...how small it is, it looks like a toy)Below is my configuration, my problem is that Pat does not seems to be able to work, I have cable-modem and they only provided one ip, I am able to ping from the firewall to any pc on my LAN, I am able to ping

Re: Please help me with my new baby(Pix 501) [7:48760]

2002-07-14 Thread Craig Columbus
Oh yeahI forgot to mention that if you want to ping the world from your LAN, you'll also need to add an outside access list, like: access-list acl_outside permit icmp any any echo-reply access-group acl_outside in interface outside Sorry about leaving that out of the first message. Craig

Re: Please help me with my new baby(Pix 501) [7:48760]

2002-07-14 Thread Craig Columbus
You need to setup access lists for inside and outside traffic. Assuming that you're just playing with this at home, only want to allow established traffic into your network, and want to let all traffic out of your LAN to the world, do something like: access-list acl_inside permit ip any any