Cisco Pix 501 and Linksys router

Cisco Pix 501 and Linksys router

NewsGroups | Search | Tools
 comp.dcom.sys.cisco  Post an article  get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content  add this group's latest topics to your Google content  YahooMyWeb Yahoo!  Google Google  Windows Live Favorites Windows Live  del.icio.us del.icio.us  digg digg  Add to Netscape Netscape
Subject Author Date
Cisco Pix 501 and Linksys router chappobluff 07-06-2005
Posted by chappobluff on July 6, 2005, 4:34 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
I have a Linksys router connected to a cable modem.

I just got a cisco pix 501 off of ebay and I want to put it behind the
Linksys router, then all systems behind the pix.

Can I configure int0 with a private address?

So if I give the internal network behind the PIX 192.168.3.1
then the outsidie int0 192.168.2.1

Then my linksys router 192.168.1.1

Then create a static route between the PIX and the Linksys.

Will this work. I was told that I could not configure the outside
interface with a private address.

Thanks



Spring Sale Save 20% Banner - Sale Ended 5/3/07 So Updated to NonPromo Ad
Posted by Martin Kayes on July 7, 2005, 4:06 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Yes, you can put any address on the outside interface. I have a similar
setup working with several customers.

Regards,

Martin

>I have a Linksys router connected to a cable modem.
>
> I just got a cisco pix 501 off of ebay and I want to put it behind the
> Linksys router, then all systems behind the pix.
>
> Can I configure int0 with a private address?
>
> So if I give the internal network behind the PIX 192.168.3.1
> then the outsidie int0 192.168.2.1
>
> Then my linksys router 192.168.1.1
>
> Then create a static route between the PIX and the Linksys.
>
> Will this work. I was told that I could not configure the outside
> interface with a private address.
>
> Thanks
>




Posted by Ronin on July 8, 2005, 11:05 am
If you were  Registered and logged in, you could reply and use other advanced thread options
I can confirm that this can be done as I am currently doing it myself
(however I am using a Draytek instead of a Linksys).

At present from the PIX I can ping outside to the Internet but PC's from
behind the PIX (although they have a correct configured IP address) can only
ping to the inside interface of the PIX but cannot go out!

I am wondering whether this is due to the fact that there is NAT happening
on the Draytek but not sure what else to do, if anyone can give any tips
that would be great!

J


> Yes, you can put any address on the outside interface. I have a similar
> setup working with several customers.
>
> Regards,
>
> Martin
>
>>I have a Linksys router connected to a cable modem.
>>
>> I just got a cisco pix 501 off of ebay and I want to put it behind the
>> Linksys router, then all systems behind the pix.
>>
>> Can I configure int0 with a private address?
>>
>> So if I give the internal network behind the PIX 192.168.3.1
>> then the outsidie int0 192.168.2.1
>>
>> Then my linksys router 192.168.1.1
>>
>> Then create a static route between the PIX and the Linksys.
>>
>> Will this work. I was told that I could not configure the outside
>> interface with a private address.
>>
>> Thanks
>>
>
>




Posted by Martin Kayes on July 13, 2005, 9:23 am
If you were  Registered and logged in, you could reply and use other advanced thread options
It depends how your NAT is setup. If the Draytek router is doing a 1:1 NAT
to the outside interface address of the PIX, then the PIX will need a global
nat setting up to translate the PC's to it's own outside interface address.

If the Draytek is doing a many:1 PAT translation and is using the PC's
subnet as the source then the PIX will need a nat 0 statement for the PC
subnet to be allowed to reach the Draytek with their original IP's intact.

If that isn't too clear then could you confirm which types of NAT & relevant
addresses you are using.

Regards,

Martin


>I can confirm that this can be done as I am currently doing it myself
>(however I am using a Draytek instead of a Linksys).
>
> At present from the PIX I can ping outside to the Internet but PC's from
> behind the PIX (although they have a correct configured IP address) can
> only ping to the inside interface of the PIX but cannot go out!
>
> I am wondering whether this is due to the fact that there is NAT happening
> on the Draytek but not sure what else to do, if anyone can give any tips
> that would be great!
>
> J
>
>
>> Yes, you can put any address on the outside interface. I have a similar
>> setup working with several customers.
>>
>> Regards,
>>
>> Martin
>>
>>>I have a Linksys router connected to a cable modem.
>>>
>>> I just got a cisco pix 501 off of ebay and I want to put it behind the
>>> Linksys router, then all systems behind the pix.
>>>
>>> Can I configure int0 with a private address?
>>>
>>> So if I give the internal network behind the PIX 192.168.3.1
>>> then the outsidie int0 192.168.2.1
>>>
>>> Then my linksys router 192.168.1.1
>>>
>>> Then create a static route between the PIX and the Linksys.
>>>
>>> Will this work. I was told that I could not configure the outside
>>> interface with a private address.
>>>
>>> Thanks
>>>
>>
>>
>
>




Similar ThreadsPosted
Linksys Router < -- > Cisco PIX 506e September 22, 2005, 9:02 am
Linksys router March 8, 2007, 3:54 pm
Vpn 3020 and linksys vpn router December 21, 2004, 9:42 pm
Linksys router as switch April 19, 2007, 9:20 am
Linksys router blocking some sites December 28, 2004, 4:05 am
Linksys router blocking some sites January 2, 2005, 8:13 pm
Linksys router WAG54G and updates of antispyware November 17, 2005, 11:25 pm
Connect Catalyst 2924 to Linksys Router June 25, 2007, 6:16 am
Unable to Connect Multiple VPN Clients via Linksys Router October 20, 2006, 8:57 am
FS: Linksys RT31P2 VoIP PAP2+Router Combo$29.99USD/each (900 units available) June 2, 2007, 11:29 am

other useful resources:
The Federal Communications Commission (FCC)
Telecommunications Industry Association
Electronic and Software Security Products and Services
International Telecommunication Union

Custom CGI Perl and PHP programming by 1-Script.com

Contact Us | Privacy Policy
The site map in XML format XML site map