Questions tagged [cisco-pix]

The Cisco PIX line of products were devices that provided firewall and VPN functionality.

The Cisco PIX line of products were devices that provided firewall and VPN functionality.

They have been replaced by the Cisco ASA line of products. Many of the configuration commands used in PIX are the same or similar to those used in ASA, particularly earlier versions of the ASA operating system (version 7.x). Therefore, many useful answers to PIX related questions may be found under Cisco-ASA questions.

85 questions
7
votes
7 answers

Are there any good free Cisco router simulators out there?

I'm just starting some Cisco training and I would like to know if there are any freely available simulators available.
scottm
  • 349
  • 3
  • 5
  • 18
4
votes
3 answers

What might prevent IKE handshake success in building an IPSEC tunnel?

We use Cisco ASA for our IPSEC VPNs, using the EZVPN method. From time to time we encounter problems where an ISP has made a change to their network and our VPN stops working. Nine times out of ten the ISP denies that their change could have…
dunxd
  • 9,482
  • 21
  • 80
  • 117
3
votes
2 answers

New IP addressing from ISP

We just got a new Internet fiber service. Our ISP gave us a /30 for WAN and /29 for LAN? I have never seen this when setting up a new ISP service. I was always given a block of ip addresses (if needed) in the same range. So the WAN address gateway…
user202045
  • 33
  • 3
3
votes
1 answer

PIX 506E, MTU, VPN Packet Fragmentation and Shoretel IP telephone system

We have two sites, a large Southern site and a small Northern site, that have a VPN between them defined on two Cisco PIX Firewalls. Over this VPN Shoretel IP phone traffic travels as well as all other network traffic. We recently switched the…
MagicalArmchair
  • 265
  • 3
  • 10
3
votes
2 answers

Cisco Pix 501 (and probably 506e) PDM web access and Java errors

Are there any nice options for using the PDM on an old Cisco Pix 501 or 506e with modern computers/browsers? I have an old 501 at a remote site and only have https access to it from my location. I can make the changes via command line, but due to…
ewwhite
  • 194,921
  • 91
  • 434
  • 799
3
votes
6 answers

Cisco PIX to Juniper Netscreen Policy-based VPN fails Phase 2 Proposal

I've followed the instructions to configure a VPN between a netscreen device and a Cisco PIX as directed by Cisco's [netscreen to PIX VPN]http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a00801c4445.shtml…
elint
  • 82
  • 1
  • 2
  • 10
3
votes
2 answers

Programmer configuring a new network

I'm in the process of expanding my home network from a couple of laptops on a wireless Verizon FiOS router to include: Linksys 24-port switch Cisco Pix 515 Cisco 3640 router One new development desktop and three new machines to act as a db…
3Dave
  • 159
  • 7
3
votes
2 answers

add detailed authentication + logging to pix 515e

I have a pix 515e running pixos 6.3 w/ 64MB RAM, 3 ethernet interfaces, only 2 in use. I am using it as an internet gateway for ~100 devices, daily peak of about 6 Mbps (megabits per second) inbound, about 10%-20% of that value outbound. It works…
user32996
  • 43
  • 2
2
votes
1 answer

PIX Firewall Causing Packet Loss

I am currently in the process of modifying how internet reaches my front end servers and I am having a strange issue with one of the existing stacks. There is one physical firewall which is above the server, if I use this, I start recieving packet…
boburob
  • 1,174
  • 8
  • 23
2
votes
3 answers

Cisco ASA 5505 to replace a Cisco PIX

Is a Cisco ASA 5505 powerful / capable enough to replace a Cisco PIX 503 ? The PIX runs about 10 site to site VPN's and 40+ individual users on vpn.
Scott Szretter
  • 1,860
  • 11
  • 42
  • 66
2
votes
1 answer

Convert Site-to-Site VPN from PIX to ASA 8.2

I have been working on converting a config over from a PIX to a ASA 8.2 but I am running into some trouble with the site to site vpn part of it. The PIX has both a client VPN and site to site. Since some of the configs for the site to site cross…
evolvd
  • 1,374
  • 6
  • 33
  • 58
2
votes
4 answers

Un-failing over a Cisco PIX 515e

We had a power outage at our data center last week and when our dual PIX 515E running IOS 7.0(8) (configured with a failover cable) came back, they were in a failed over state where the Secondary unit is active and the Primary unit is standby I…
Aaron Brown
  • 1,677
  • 1
  • 12
  • 21
2
votes
2 answers

Cisco PIX land attack

I am continouly getting errors log Deny IP due to Land Attack from IP to IP. Both source and destination IP address are same. Can any one please guide me what could be the issue and how I can fix this?
Rajiv Sharma
2
votes
1 answer

Cisco Pix 501 - reaching local host limit, showing odd IP addresses

I am running out of licenses on my Pix 501, and the show local-host command lists a number of odd IP addresses that do not belong to my 10.10.1.* subnet. Any idea what they are? The only thing I could find was a potential ISP: DINSA is Defence…
cdonner
  • 381
  • 1
  • 5
  • 14
1
vote
0 answers

Cisco Bridge and MAC address blocking

I have two locations connected with two Cisco 861 routers. They are connected using a bridge. The subnet is the same 192.168.100.x.The routers are on E-line connection from provider. Location A is the main (has the internet connection and the main…
HK78
  • 11
  • 2
1
2 3 4 5 6