PIX 506 Web, Mail Config w/one IP

Hello, I am trying to configure my Pix 506 to allow outgoing traffic all and before 25,80 port traffic, 8080 and 7777 entrants to an internal web server (192.168.1.3,4) and mail server (192.168.1.2)

I have an external IP x.x.x.12

What Miss me...

Thank you. -rob

Here is my config:

interface ethernet0 car

Auto interface ethernet1

ethernet0 nameif outside security0

nameif ethernet1 inside the security100

names of

name 192.168.1.4 NVDEV02

name 192.168.1.3 NVAPP01

NVEGVPN_splitTunnelAcl ip access list allow a whole

inside_outbound_nat0_acl ip access list allow any 192.168.1.0 255.255.255.192

inside_outbound_nat0_acl ip access list allow any external interface

outside_cryptomap_dyn_20 ip access list allow any 192.168.1.0 255.255.255.192

outside_cryptomap_dyn_20 ip access list allow any external interface

outside_access_in list access permit tcp any host x.x.x.12 eq 8080

outside_access_in list access permit tcp any host x.x.x.12 eq www

outside_access_in list access permit tcp any host x.x.x.12 eq 7777

outside_access_in list access permit tcp any host x.x.x.12 eq smtp

pager lines 24

opening of session

information recording console

logging trap information

Outside 1500 MTU

Within 1500 MTU

IP address outside x.x.x.12 255.255.255.0

IP address inside 192.168.1.1 255.255.255.0

alarm action IP verification of information

alarm action attack IP audit

local IP NVEGPOOL 192.168.1.30 pool - 192.168.1.49

location of PDM 192.168.1.2 255.255.255.255 inside

location of PDM NVAPP01 255.255.255.255 inside

location of PDM NVDEV02 255.255.255.255 inside

PDM logging 100 information

history of PDM activate

ARP timeout 14400

Global 1 interface (outside)

NAT (inside) 0-list of access inside_outbound_nat0_acl

NAT (inside) 1 0.0.0.0 0.0.0.0 0 0

static (inside, outside) x.x.x.12 www NVAPP01 www netmask 255.255.255.255 tcp 0 0

static (inside, outside) tcp x.x.x.12 7777 NVAPP01 7777 netmask 255.255.255.255 0 0

static (inside, outside) tcp x.x.x.12 8080 8080 NVDEV02 netmask 255.255.255.255 0 0

static (inside, outside) tcp smtp 192.168.1.2 x.x.x.12 smtp netmask 255.255.255.255 0 0

Access-group outside_access_in in interface outside

Route outside 0.0.0.0 0.0.0.0 x.x.x.12 1

Route inside 192.168.1.2 255.255.255.255 192.168.1.1 1

Timeout xlate 0:05:00

Timeout conn 01:00 half-closed 0:10:00 udp 0: CPP 02:00 0:10:00 01:00 h225

H323 timeout 0:05:00 mgcp 0: sip from 05:00 0:30:00 sip_media 0:02:00

Sip timeout - disconnect 0:02:00 prompt Protocol sip-0: 03:00

Timeout, uauth 0:05:00 absolute

GANYMEDE + Protocol Ganymede + AAA-server

AAA-server GANYMEDE + 3 max-failed-attempts

AAA-server GANYMEDE + deadtime 10

RADIUS Protocol RADIUS AAA server

AAA-server RADIUS 3 max-failed-attempts

AAA-RADIUS deadtime 10 Server

AAA-server RADIUS (inside) host 192.168.1.2 nvegvpn timeout 5

AAA-server local LOCAL Protocol

Enable http server

http 192.168.1.0 255.255.255.0 inside

No snmp server location

No snmp Server contact

SNMP-Server Community public

No trap to activate snmp Server

enable floodguard

Config seems good. You have made a < clear="" xlate=""> ?

Take care this will reset the translation of the entire table and all users will lose your sessions.

sincerely

Patrick

Tags: Cisco Security

Similar Questions

  • ICloud on Web Mail vs. Mac Mail in applications

    ICloud on Web Mail has a tab From from one alias, but Mac Mail (the application on my MacBook Pro) does not have a tab (only a response to the tab). How to use my iCloud alias without having to go to the web version of iCloud?

    Select the address 'From' in the menu dropdown.

  • PIX 506 - cannot connect to PDM more

    We have a PIX 506 in a test environment that has been configured in the past using Netscape. Now when we try to connect via https, Netscape says "unable to connect to the server (TCP error: i/o error). The PIX is version 6.1 (1) and PDM is 1.0 (2). I can connect via telnet and change the configuration, but I was not able to get the connection Internet work anymore.

    I captured the connection with ethereal and I see 3 packets, the connection, then the client sends a SSLv2 Client Hello, then the PIX closes the connection. When I dump the telnet configuration, I get:

    Enable http server

    ClientName http 255.255.255.255 inside

    where clientname is defined above in the name and the entries of "place of pdm.

    The PDM installation guide has a troubleshooting section, and it says to make sure the clock is set to UTC. "show clock" indicates the time and date, but no area is listed.

    You have changed the IP address on the PIX interface at some point? If so, try to regenerate public/private key pairs. Fox

    > ca related rsa

    > key gen rsa 512 AC

    > ca save all

    or you can just run the command 'setup' from config mode and it'll do all that for you. Then try to reconnect.

  • PIX 506 error VLAN switch

    Hello

    I meet a few small problems with a v6.3 (4) pix 506 and 2924c-xl switch.

    On the switch for the pix port, many input errors and Runts appear.

    On the pix, there is a VLAN configured and the trunk port is configured as

    mentioned in the Release Notes for Pix.

    I could not find a bad configuration here, but maybe someone has an idea how to

    solve this problem.

    Thank you

    just a few lines:

    [pix]

    Auto interface ethernet1

    physical interface ethernet1 vlan2

    logical interface ethernet1 vlan999

    [go]

    interface FastEthernet0/1

    PIX506 description

    switchport trunk encapsulation dot1q

    switchport mode trunk

    spanning tree portfast

    No cdp enable

    interface VLAN2

    IP x.x.x.x 255.255.255.0

    no ip directed broadcast to the

    no ip route cache

    Hello

    Do you find some useful info on the Runts on 802. 1 q port.

    Runts on an 802. 1 q trunk port.

    A catalyst 2900XL or 3500XL that receives a frame of 802 bytes. 1 q encapsulated 64 or 66 on a port trunk counts as a runt. However, it continues to transfer the weft.

    This issue occurs when you connect to the Cisco 7960 IP phones switch when using a VLAN auxiliary (voice).

    This issue is cosmetic and because of an ASIC limitation.

    It should not cause any degradation in the performance of the switch.

    For more information, see Cisco ID CSCds32999 bug (only for registered customers).

    Cisco IOS Software version 12.0 (5.4) WC1 or later

    On the errors of entry...

    Entry errors

    Entry mistakes provide a count of errors that occurred when trying to get packages from this port. The meter includes errors CRC and the framework. However, it does not include ignored packets. It is a list of entry errors:

    CRC errors: Occur when the packets received fail the CRC check.

    Frame errors: occur when the receiver frame is not complete.

    Ignored Counter: Account number of frames dropped on entry due to depletion of resources in the switch fabric.

    Meter overruns: occurs when interframe gap (IFG) are too short. In this case, a new Ethernet frame arrives before the previous one is completely stored in the shared memory.

    http://www.Cisco.com/en/us/products/hw/switches/ps607/products_tech_note09186a0080125913.shtml

    regds

  • How to download web mail subfolders

    ThunderBird only downloads the messages from my web mail "Inbox." How to recognize subfolders that I created in my web mail using filters? I want to download all of my subfolders as well as my main "Inbox".

    Before remove the account POP and add it as IMAP, copy existing messages into folders created under local folders, for example Old Inbox POP and former Envoy pop.

  • How to select entire groups or to multiple recipients in MAIL, rather than one at a time?

    How to select entire groups or to multiple recipients in MAIL, rather than one at a time?

    One way is to use the app to create a group with the intended recipients. Then when composing the email just type the group name in the To: field.

  • How to switch web browser and which one should I use

    How to switch web browser and which one should I use thanks

    FireFox.
    http://www.Mozilla.org/en-us/Firefox/new/

  • Connection to the server would not check when you configure Outlook Express with Charter Web Mail

    Hello! I call on my Outlook Express is installed on my Windows XP Professional. I need assistance with the configuration of Outlook Express with my Charter Web Mail. Charter, I called and they helped me with the setup but I'm stuck on the last part and it gave me an error on the server. The "connection to the server don't check not" and the Charter was not able to help me through, and they said it's a Microsoft Issue. I need some help here. Please help me! Thank you!

    See here: http://www.myaccount.charter.com/customers/support.aspx?supportarticleid=1241

    There are step by step instructions.

    Steve

  • Eircom to Sky - Web Mail

    Get this error when moving the email to Eircom to sky on Web Mail V 6.0 - any ideas on how to fix it please?   Talking to heaven and they can't help!   Thank you

    Account: 'pop.tools.sky.com (1)', server: 'webmail.eircom.net', Protocol: POP3, server response: '-ERR invalid command', Port: 995, secure (SSL): Yes, Server error: 0x800CCC90, error number: 0x800CCC18

    Hi Eva,

    I suggest post you your request in the support forum Eircom.

    http://community.eircom.NET/

    Check out the link;

    {8C5A3413-D734-4C47-9016-F9EBD3B87D94} http://support.eircom.NET/SRVS/cgi-bin/WEBCGI.exe/&/?new&KB=BB&company= & t = landing

    http://support.eircom.NET/SRVS/cgi-bin/WEBCGI.exe/&/?St=500&E=0000000000063311558&K=3600&SXI=4&case=6736

    If you need help with Windows, please do not hesitate to post. We will be happy to help you.

  • Windows Mail has taken all my emails from my web mail, Yahoo! mail account

    I opened the windows mail to check out (I do not use windows mail) and when I am logged in with my Yahoo! mail I.D. and password windows messaging has taken all my e-mail, drafts etc to my mail. Yahoo Yahoo! mail is web mail and she later receives emails I did this.however I would like to retrieve emails from windows mail to Yahoo! mail of ideas?

    In Windows Mail in the top Menu bar. Tools | Accounts | Mail | Properties | Advanced tab.
     
    Last box.
     
  • Problem recording with Pix 506

    Hello

    I have an old pix 506, it has been disconnected for a while and now I feel I want to use. But I forgot the password, I can ping from the port to my pc but I can't ping from pc-to the pix.

    No idea how to reset the password or delete it there or return to the default factory setting.

    Thank you

    See this document:

    Password Recovery and AAA Configuration procedure of recovery for the PIX

    http://www.Cisco.com/en/us/products/HW/vpndevc/ps2030/products_password_recovery09186a008009478b.shtml

    Factory reset after the recovery of password:

    write erase

    reload

    sincerely

    Patrick

  • Endpoint Cisco PIX 506

    The 6.3 (3) Cisco PIX 506 will work as an endpoint? How to configure it?

    Do you mean IPSEC endpoint. If so, Yes... You can configure the following:

    No nat:

    NAT (inside) - 0 100 access list

    access-list 100 permit ip 192.168.180.1 host 10.1.1.0 255.255.255.0

    IP local pool vpnpool 10.1.1.1 - 10.1.1.254

    Crypto map configuration:

    Permitted connection ipsec sysopt

    Crypto ipsec transform-set esp-3des esp-md5-hmac RIGHT

    Crypto-map dynamic dynmap 10 transform-set RIGHT

    map mymap 10-isakmp ipsec crypto dynamic dynmap

    client configuration address map mymap crypto initiate

    client configuration address map mymap crypto answer

    client authentication card crypto LOCAL mymap

    mymap outside crypto map interface

    ISAKMP allows outside

    ISAKMP identity address

    The policy configuration:

    part of pre authentication ISAKMP policy 10

    ISAKMP policy 10 3des encryption

    ISAKMP policy 10 md5 hash

    10 2 ISAKMP policy group

    ISAKMP life duration strategy 10 86400

    VPN group configuration:

    vpngroup address vpnpool pool abcvpn

    vpngroup split tunnel 100 abcvpn

    vpngroup idle 1800 abcvpn-time

    vpngroup password abcvpn *.

    username cisco password cisco

  • PIX 506 - How to clear the counter on interfaces?

    Hello

    Can anyone advise on how to delete counters interface on the PIX 506 running version 6.1 (2)?

    TIA.

    PF

    You are welcome. Please mark this more closely

  • Why is-iCloud Web Mail advising me on mailing lists?

    A picture is worth a thousand words:

    It began to appear in the e-mail web iCloud a few days ago.

    What the devil?

    This is one of the new features of iOS 10.

    http://www.Apple.com/IOS/IOS-10/

  • Windows live mails in double - one of my accounts that I use on Windows Live Mail will receive twice the same email

    When I opened my laptop (always on), windows live mail will automatically connect and checks for new messages. I have 3 email accounts, but one of them receives the same e-mail twice. I contacted my ISP provider and was informed that the messages I get are only on the server once and that Windows Live Mail is the cause. I looked at the settings and therefore has a technician from my ISP and do not see why this is happening. Can anyone offer assistance.

    @Maksteel

    For beginners... Disable the following in the "Général" tab of Windows Live Mail (WLM) options

    1. to access the general tab--> WLM 2011/2012(Alt F O M) or WLM 2009 (Alt T O)

    -Send and receive messages at startup

    -Search for new messages every minute (s) ' x'

    2. make sure that the account receive duplicate emails is not configured to leave a message on the server (default of WLM is to "leave a message on the server)

    3. continue to use WLM by send and receive in manual mode, if no duplicates re-enable each item one time and repeat the test for the cause.

    If reconfiguration is not working... Post your question in the forum of answers from Microsoft Mail and make sure that you include the type of e-mail account (Pop3, IMAP, Http) with the double problem.  Note: If IMAP double-check your configuration in your web account interface. FYI... recommended are the WLM versions for each operating system: XP (2009), Vista (2011), Windows 7/Windows 8 (2012)

    .. .Winston
    MSFT MVP consumer Apps

Maybe you are looking for