Cisco PIX Question...

VeeDubbs

Limp Gawd
Joined
Dec 9, 2005
Messages
398
Alright everyone, be kind, I am very new and unfamiliar with PIX. It is a PIX-515.

Anyways...I have an internal address of 10.16.0.21 which is an intercom system for security. There is a new parking lot that has been built which has its own DSL line going to it for connectivity. It has its own static IP from TDS. On the PIX we have setup an external address to handle all the communications between the security system and the new parking lot stuff. So from the parking lot the system is being told to go to xxx.xxx.xxx.xxx. Also on the PIX we have that external IP address being routed to 10.16.0.21 (with the proper ports open and what not). However, no one can seem to ping the external address. I am pretty confused at this point as I am new to this. Any help is appreciated. Thanks guys!
 
Check the logs of the PIX. You can have it log to a syslog server, and then watch those scroll by; very very helpful.

The relevant parts of your config would be helpful to make sure you have it right.
 
By default, PIX blocks icmp requests. You can also do a "debug packet outside" (and be ready to type "undebug all") on the interface to see if it's even receiving the pings..that's where I'd start.
 
Please post teh config. As for ping, they should be able to hit the PIX's outside interface, just not internal IPs (without first being configured).
 
Back
Top