Hi All ,
Cmt paramétrer un CISCO PIX 501 derrière un ST510V4.
J'ai mis le ST510V4 en bridge et le pix en client PPPOE mais cela ne fonctionne pas
, hors quand je créer une cnx large bande passante le ST510V4 se connecte au Net cnx oki et nav oki
voici la config de mon PIX qui a pour IP 192.168.1.254
Code :
- PIX Version 6.3(5)
- interface ethernet0 auto
- interface ethernet1 100full
- nameif ethernet0 outside securi
- nameif ethernet1 inside security100
- enable password xxxxxxxx encrypted
- passwd xxxxxxxxx encrypted
- hostname pixfirewall
- domain-name ciscopix.com
- clock timezone CEST 1
- clock summer-time CEDT recurring last Sun Mar 2:00 last Sun Oct 3:00
- fixup protocol dns maximum-length 512
- fixup protocol ftp 21
- fixup protocol h323 h225 1720
- fixup protocol h323 ras 1718-1719
- fixup protocol http 80
- fixup protocol rsh 514
- fixup protocol rtsp 554
- fixup protocol sip 5060
- fixup protocol sip udp 5060
- fixup protocol skinny 20
- fixup protocol smtp 25
- fixup protocol sqlnet 1521
- fixup protocol tftp 69
- names
- name 192.168.1.1 xxxxxx
- name 192.168.1.0 lan
- object-group service TSE tcp
- port-object range 3389 3389
- access-list outside_access_in permit tcp any interface outside eq 3389
- access-list inside_outbound_nat0_acl permit ip interface inside interface outsid
- e
- pager lines 24
- mtu outside 1500
- mtu inside 1500
- ip address outside pppoe setroute
- ip address inside 192.168.1.254 255.255.255.0
- ip audit info action alarm
- ip audit attack action alarm
- pdm location xxxxxx 255.255.255.255 inside
- pdm location xxxxxxxxxxx 255.255.255.255 outside
- pdm logging informational 100
- pdm history enable
- arp timeout 14400
- global (outside) 1 interface
- nat (inside) 1 0.0.0.0 0.0.0.0 0 0
- static (inside,outside) tcp interface 3389 xxxxx 3389 netmask 255.255.255.255
- 0 0
- access-group outside_access_in in interface outside
- timeout xlate 0:05:00
- timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h225 1:00:00
- timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media
- timeout sip-disconnect 0:02:00 sip-invite 0:03:00
- timeout uauth 0:05:00 absolute
- aaa-server TACACS+ protocol tacacs+
- aaa-server TACACS+ max-failed-attempts 3
- aaa-server TACACS+ deadtime 10
- aaa-server RADIUS protocol radius
- aaa-server RADIUS max-failed-attempts 3
- aaa-server RADIUS deadtime 10
- aaa-server LOCAL protocol local
- http server enable
- http lan 255.255.255.0 inside
- no snmp-server location
- no snmp-server contact
- snmp-server community public
- no snmp-server enable traps
- floodguard enable
- sysopt connection permit
- crypto map transam 1 ipsec-isakmp
- crypto map transam 1 set peer xxxxxxxx
- crypto map transam 1 set transform-set xxxxxx
- ! Incomplete
- telnet lan 255.255.255.0 inside
- telnet timeout 5
- ssh timeout 5
- console timeout 0
- vpdn group pppoe_group request dialout pppoe
- vpdn group pppoe_group localname fti/xxxxxxx
- vpdn group pppoe_group ppp authentication pap
- vpdn username fti/xxxxxxxx password ********
- dhcpd address 192.168.1.10-192.168.1.40 inside
- dhcpd dns 80.10.246.1 80.10.246.132
- dhcpd lease 3600
- dhcpd ping_timeout 750
- dhcpd auto_config outside
- dhcpd enable inside
- vpnclient server xxxxxxxxxx
- vpnclient mode network-extension-mode
- vpnclient vpngroup xxxxxxxxxx password ********
- vpnclient enable
- terminal width 80
- Cryptochecksum:axxxxxxxxxxxxxxxxxxxx
- pixfirewall#
|
Merci d'avance
Message édité par kamui le 08-08-2006 à 00:22:01