Cisco Pix & ASA - Thursday, July 10, 2008 18:55 - 0 Comments

PIX 515 configuration with NAT

Basic PIX 515 firewall configuration with NAT

Out of the Box, the PIX 515 is configured to serve most small and medium businesses. A
default DHCP server address pool is included with the unit. By default from the factory the 515 is set
to protect a network from unsolicited traffic. To change configuration setting use the following
procedure

1. Start your web broswer.
2. Enter the following URL: https://192.168.1.1/startup.html.
3. Both username and password should remain empty and simply press [enter].
4. Choose yes to accept certificates and follow the instructions on screen to configure.
5. Type the nat (inside) 1 0 0 to allow users from the inside interface start connections.
6. Type the nat (dmz2) 1 0 0 command to let users on the dmz2 interface start connections.
7. Type the  nat (dmz1) 1 0 0 command to let users on the dmz1 interface start connections.
8. Type the global (dmz2) 1 10.2.1.10-10.2.1.254 command. This enables translated connections
9. Type the global (dmz1) 1 10.1.1.10-10.1.1.254 command. This enables translated connections
10. Type the global (outside) 1 209.165.201.10-209.165.201.30
This permits access to the outside interface for translated connections. ')}

Article written by MyComputerAid.com