Config Help-I'm being Lazy

That is really funny.

When my wife asks me, "Darling, why haven't you come to bed yet (nudge, nudge)?", I need something better to tell her than "I was giving away the fruit of my years of professional experience for free to someone who did not want be bothered opening the manual."

Hi Curt,

You may wish to investigate:

Configure a Cisco PIX Firewall with this template

Brad Reese

Thank you very much. This help I can use.

I'm glad to have been amuzing to the experts. People that uptight need a laugh. I'm on a really tight budget and can't afford one of the experts.

Also, I'm trying to get something new going with out learning a bunch of stuf I will not use again.

It is not the fact that people are uptight, it is the fact that you come to a NG and ask for a complete config, not only that a complex config. You did not even try to attempt configuring the interfaces for crist sake, if we were to give you a complete config would you know what to do with it?

Good for you, good luck with that.

In a situation such as yours, the recommendation from security professionals would be to not put in any firewall at all.

Seriously.

A firewall that is not maintained, updated with new software releases, and the logs monitored, is worse than not having a firewall. If you do not have a firewall, then you will *know* you are vulnerable, and so will take care in maintaining the security of your interior hosts; but if you just set up the firewall and then do not pay attention to it, you will be under the -illusion- that you are safe and so will neglect the security on your interior systems and never notice when the crackers take control of them.

In saying the above, I am not "jiving you", making up something silly but plausible: I am conveying what much better security experts than I have said often. As Bruce Schneier, famous cryptography and security expert says in his book, Secrets and Lies, "Security is a process, not a product."

If you think technology can solve your security problems, then you don't understand the problems and you don't understand the technology.

While I can understand this reaction, if you view this differently it starts to make sense.

Consider a theoretical question: "I am new to this, I got a "empty" router, could anyone provide me with a fully populated configuration to do X/Y which I could use as a template to guide me to configure my router ?"

Having a template that is known to work would most certaintly help a newcomer by seeing real world examples of configuration commands.

It is one thing to go through a manual to read about individual commands. It is another to know what sort of command combinations result in what you really want to do.

Now this is really BS, while I can understand this could help the OP get started on his config by seeing a complete config, BUT by using an well known tool called '

It would be kinda like me stepping into a sql NG and asking I need a fully functional ASP front end and sql backend to do X /Y I am too lazy to learn, and do not have the budget to pay someone so can someone do this for me? I would think most people in that situation would say 'hell NO' as well. What do you think?

And speaking of google lets have a look at the first hit shall we?

wow a whole page dedicated to cisco pix example configs, who would have thought it would be sooo hard to find...

OK. I stand corrected then. The Cisco site can be overwhelming to a newbie. I got help from this newsgroup just to find the right web pages for the manual for my switch.

The original poster got his answer in your response.