Setting up "MS File Sharing" on PIX515E 7.2 using ASDM 5.2

open original image

I finally have my Pix configured, and have learned much about how it works, however I still have a problem with seeing Samba shares in the DMZ from my inside network.

Does anyone out there have configuration experience with this ?

Regards

David

Thanks for getting back to me Andrey.

I'd like it to work just the way it normally does on Windows XP. I want to have the share show up in the Network Neighborhood. This would make it easy for the non-techie staff to find and use the shared info.

I've had it working to the point where I can set up a drive letter and assign the share, but then each computer needs to be modified to the same settings.

Looking for the simple answer for users..

Regards

David

This may well not be possible without a domain. Do you use a Domain?

If you had a router and not a pix I suppose that you might be able to fudge it up with some kind of UDP forwarding. I doubt, but i am not sure, that the pix does UDP forwarding.

The other option is probably a WINS server. You can set up DHCP to issue a WINS server and manually configure non-dhcp devices to use it too. That should work I think.

Google for [windows browsing across subnets].

By the way - it seems that Server 2008 (and maybe by implication Vista) does not do old fasioned broadcast browsing by default.

"NetBIOS Browsing Across Subnets May Fail After Upgrading to Windows Server 2008".

If this seems complicated, it is because MS could not make its mind up and has come up with many (now 4 at least) different methods for solving this problem. The problem however is very tough to scale and so none of the solutions work on a large network.

Thanks fot the info... I'll look into that.

The Pix has some limited routing capability, however I don't know it's limitations. It may not be able to route UDP. I'm a novice at this whole thing, but have been intensly interested in networking for the past 10 years, and played around with consumer junk. Recently I started my own business, and needed to have better equipment. I host my own websites, and mail. So learning a lot... very fast about how bad it is out there.

Regards

David Henzler

If you have a domain then use that otherwise WINS.

If you are using a translation group it makes things a bit tricky as you can go through any IP in that group. From my knowledge, all you need to do is to create access rules to allow UDP and TCP, PIX 515E can do it...no problem. Have your DMZ server point to DMZ IP (This is a host that you create on the PIX....(Your internal DNS server) NAT that to internal IP. DMZ server allow DNS lookup to internal DNS server. Create DNS entry for you DMZ server specify DMZ IP. In all you should be able to map network drive via \\\\dmz\\share.

If you want, drop me a mail.....I'll have a look and verify for you the exact config for the pix.... 2:07 AM my brains not that fresh right now...

Regards,

Vincent