Wednesday, December 12, 2007

PIX Firewall - Basic configuration

Hi friends,

This article gives the basic configuration steps of Cisco PIX firewall series.The pix firewall is the hardware device known for delivering robust user and application policy enforcement, multivector attack protection, and secure connectivity services in cost-effective, easy-to-deploy solutions.

Setting hostname:
hostname pixfirewall

Setting Domainname:
domain-name domain.com

setting the interface speed:
interface ethernet0 100full
interface ethernet1 100full

Naming the interface:
nameif ethernet0 outside security0
nameif ethernet1 inside security100

Setting the logging:
logging on

configuring interface:
ip address outside 200.200.200.200 255.255.255.240
ip address inside 192.168.2.254 255.255.255.0

configuring NAT:
nat (inside) 1 0.0.0.0 0.0.0.0 0 0
global (outside) 1 200.200.200.201-200.200.200.200.215 netmask 255.255.255.240
global (outside) 1 200.200.200.216 netmask 255.255.255.240


enabling telnet :
telnet 192.168.2.0 255.255.255.0 inside
telnet 200.200.200.200 255.255.255.240 outside
telnet timeout 15

Setting the Telnet password:
passwd

Configuring access-list:
access-list 100 permit icmp any any
access-list 100 permit tcp any any eq www
access-list 100 permit tcp any any eq ftp
access-list 100 permit tcp any any eq ftp-data
access-list 100 permit tcp any any eq smtp
access-list 100 permit tcp any
access-list 100 permit tcp host any
access-group 100 in interface outside

Setting the Route for packet transfer:
route outside 0.0.0.0 0.0.0.0 200.200.200.200 1

saving the changes to the flash memory:
write memory

configuring the PDM:
setup - enter the related details.

Thanks
Logu
logu_microsoft@hotmail.com
991-98414-99143

No comments: