PIX minimal setup for pinging out the inside

- B
- barret bonden
  
  Contact options for registered users
posted
14 years ago

Thu, Dec 17, 2009 6:02 PM

What would be the minimal setup necessary for a successful ping out the inside interface ?

I assume all I would have to do is setup an IP address on the inside interface in the same subnet as the rest of my LAN. I souldn't need NAT or the Global commands working, and I should not need statics or an access list , right ? So something like

interface ethernet 1 100full nameif ethernet1 inside security100 ip address inside 192.168.0.238 255.255.255.0

is really all I would need, no ?

We picked up an old 515 E to use as a back up. I want to get it on the local net so I can upload the config from the working 515. As it stands I cant get to first base. No pings, no fun

- I
- Igor MamuziÃ¦ aka Pseto
  
  Contact options for registered users
Vote on answer
posted
14 years ago

Sat, Dec 19, 2009 9:23 AM

Pinging inside interface should b working...All you have to do iz to setup interface nameif security level ip address and no shut...This is for versions 7.0 and earlier...For older versions I'm not sure since I don't have hands on expirience with older PIX os...

- S
- Shawn Westerhoff
  
  Contact options for registered users
Vote on answer
posted
14 years ago

Sat, Dec 19, 2009 8:51 PM

necessary for a successful ping out the

Send us output from show interface, and make sure you have a straight patch cable to your inside switch. If you are using 5.x PIXOS then "conduit permit icmp any any" as I recall but it has been a while. The 515 should have 6.xx though. Keep in mind the OS needs to match for the config to come across, you might simply copy the "sh run" and paste in the config a line or 4 at a time to catch any errors. sh version will show your PIXOS and licensing details, that would be helpful.