Cisco Pix 501

Hi Taipan,

You may also wish to investigate the SMC Networks Forum:

Brad Reese Cisco Technical Forums

Forgive me if this seems rude, but WTF do any of those have to do with configuring a 501 Pix?

Were you in config mode when trying to enter your changes?

To begin, your prompt should look like: pixfirewall#

Brad Reese Cisco Repair

PDM or COM console? been reset to factory defaults so many times it is not funny :-(

Yes I know what pixfirewall# (config) is.

My (stupid) assumption was that the pix was smart enough to figure out the outgoing gateway and the internal network. It seems stuck on 192.168.1.1. External IP (static) is 68.x.x.x. Internal network is 10.1.10.x. That's it. Just want to make it work. Just pass traffic. Have others to help on a VPN tunnel.

can you post your config and the exact error messages

Is the windows server "inside" or "outside" the PIX?

Right. But the fact that you tried suggests you were trying to do something like a "transparent firewall", which the PIX 501 is not able to do (you need PIX 7.x for transparent firewall and PIX 7.x is not supported on the 501.)

Based on your references to DHCP and your attempt to put both interfaces into the same network, I suspect that what you are trying to do is have hosts inside the 501 given their addresses by a DHCP server outside of the 501 (the windows 2003 server). If that is the case, then you probably want to use the dhcprelay command,

If your dhcpd setup references an IP range that overlaps the outside interface (or the inside IP), then even if you do not have "dhcpd enable" then the PIX will complain about the address overlap [if I recall correctly.] A few 'no dhcpd' commands will clear that up.

Thank you. That was very helpful. To give you a bit more data: SMC router has static IP's on the LAN and WAN sides. The Lan IP is

I set the 2k3 server up for DNS and DHCP.

Therefore, I don't need DHCP in either the SMC router or the pix. DHCP range is set for 10.1.10.10 to 10.1.10.100

The 2k3 server will be behind the PIX. Cable modem/router > Pix > managed switch > server

So what I want to do is get the PIX on the internal network by assigning it an IP like 10.1.10.200 and not use DHCP on it. This is where I am stuck. I cannot get it to take the IP address and simply pass traffic so I know it works.

To answer your question on DHCP, the 2k3 server will only give out IP's within the local network.

Once that's done I can add the 6 IP's for the VPN (actually that was very easy). Actually, I am not too concerned about the firewall aspects of the PIX. (tho' they are nice) I bought it for the VPN capabilities. I believe my biggest headaches in the end will be punching holes in the PIX firewall so I can remotely admin the server.

I could turn off DHCP on the server and let the Pix do it if needed. I prefer to let the server handle it. But I 'm willing to change :-)

Thanks for any tips you can provide!