PIX V7 DHCP

Can anyone advise whats wrong with this PIUX config - I want to get DHCP enabled... ! interface Ethernet1 nameif inside security-level 100 ip address 192.168.1.254 255.255.255.0 ! FW(config)# int e1 FW(config-if)# ip address 192.168.1.254 255.255.255.0 FW(config-if)# dhcpd address 192.168.1.100-192.168.1.200 inside Interface inside ip address or netmask not valid (0.0.0.0/255.255.255.0) FW(config)#

Thanks,,

Reply to
Ned
Loading thread data ...

Ned crashed Echelon writing news:c19664a5-5b47- snipped-for-privacy@q30g2000yqd.googlegroups.com:

Missing statement of IP address is for inside interface?

ip address inside 192.168.1.254 255.255.255.0

Reply to
Bjarke Andersen

I don't do much pix but config looks reasonable in principle.

formatting link
see it's the wrong version but you do the legwork:)

"The size of the pool is limited to 32 addresses for the PIX 506 platform and 256 addresses for other platforms."

Don't suppose you have a pix 506 do you?

Reply to
bod43

You are running a PIXos 7.0 or higher. So you do not use a 506 or below.

The error message indicates, that the PIX does not have the correct IP address on the interface e1.

Please change the IP address first and verify the correctness of the configuration by "show ip".

Then issue the "dhcpd address ..." command from the main configuration level (not the interface configuration level), there might be a bug in the earlier versions.

Please note: The PIX is not longer supported. The last available version is 8.0(33).

Reply to
Lutz Donnerhacke

PIX is a PIX-515E

FW# show ip System IP Addresses: Interface Name IP address Subnet mask Method Ethernet0 outside 89.191.49.5

255.255.255.224 manual Ethernet1 inside 192.168.1.254 255.255.255.0 manual Current IP Addresses: Interface Name IP address Subnet mask Method

FW# conf t FW(config)# dhcpd address 192.168.1.100-192.168.1.200 inside Interface inside ip address or netmask not valid (0.0.0.0/255.255.255.0) FW(config)# exit FM-FW#

Reply to
Ned

PIX is a PIX-515E

FW# show ip System IP Addresses: Interface Name IP address Subnet mask Method Ethernet0 outside 89.191.49.5

255.255.255.224 manual Ethernet1 inside 192.168.1.254 255.255.255.0 manual Current IP Addresses: Interface Name IP address Subnet mask Method

FW# conf t FW(config)# dhcpd address 192.168.1.100-192.168.1.200 inside Interface inside ip address or netmask not valid (0.0.0.0/255.255.255.0) FW(config)# exit

Reply to
Ned

Ned crashed Echelon writing news:9e940980-e491- snipped-for-privacy@e2g2000yqn.googlegroups.com:

Though I dont do much work in Cisco anymore the please note the Cisco examples of a PIX dhcp config:

Example 5-2 DHCP Server Configuration

! set the ip address of the inside interface ip address inside 10.0.1.2 255.255.255.0 ! configure the network parameters the client will use once in the ! corporate network and dhcpd address 10.0.1.101-10.0.1.110 dhcpd dns 209.165.201.2 209.165.202.129 dhcpd wins 209.165.201.5 dhcpd lease 3000 dhcpd domain example.com ! enable dhcp server daemon on the inside interface dhcpd enable inside

Especially not how Cisco sets the inside ip address with a specific command say "ip address INSIDE x.x.x.x y.y.y.y"

In your config you have named the interface and the added the IP.

Could this be the reason for your error message?

Reply to
Bjarke Andersen

No, I don't think that is the problem; what you are looking at is a version prior to version 7. In V7 the syntax used for configuring the interface is: ! interface Ethernet1 nameif inside security-level 100 ip address 192.168.1.254 255.255.255.0 !

Reply to
Ned

Your system does not have this IP addresses in use. Are you running a failover system? "show version"

Reply to
Lutz Donnerhacke

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.