RV042 - PAT does not

Similar Questions

• backup smart link does not not in RV042

  I'm in the mess I have configured RV042 in backup of secruit BI (primary/secondary links), but the question is when primary folds secondary does not gets to the top. for this I hv to remove manually main link only the cable then secondary stand... Vica-versa.

  I bought this router for auto backups but if I hv to display manually the same I was mistaken.

  is thr any soluton for that.

  NET detection, I chose the HOST ip. that is my server ip address.

  Pls help me guys. I can provide more details if necessary.

  Hi, paritly problem solved when smone told me to delete connection in Setup...

• Vista does not see my 2nd HD PATA

  I have a Vista machine professional that I try to install a second HD.  I checked in the BIOS and we see here.  I checked in disk management, and one sees there.

  Disk Management displays the disk as a 232,88 GB drive; Healthy (Primary Partition, Active)

  It does not assign a letter and do not assign a drive letter.  I can not format or access it somehow.  What can I do to fix this?

  Windows Vista Business Edition
  AMD Athlon XP 2000 1.66 GHz
  1 GB OF RAM
  32 bit OS

  Thanks for your help.

  Hello TANorcross,

  Thanks for posting on the Microsoft answers Community Forum.

  Generally what happens when you have other drives (thumb of dvd - rom, cd-rom, drives and other usb devices, network drives mapped,... etc.) and have all the drive letters.  If you exceed a certain letter system will see the new drive in disk management, but cannot attribute a letter from him, because you have exceeded the limit in which the system wants to assign letters to a hard drive.

  For example, if you have a hard drive and it is assigned to C:, and you have other drives and they list D:, E: and F:.  When you add the new hard drive it are assigned to a drive letter and so you can not access it.  To remedy this, the simplest method is to assign what is the d: drive to another letter.  The letter is okay as long as the system don't mind setting a DVD reader for example letter.  Once you do that it should automatically assign the letter D: for the hard drive again on restart.  If this isn't the case, you should be able to manually assign since this letter is now available.

  Please meet results

  Thank you
  Jonathan

• Flash does not work in Firefox 13

  Install Firefox 13 yesterday. Now flash does not work. Have done all the patches that are supposed to no avail. Have uninstalled and reinstalled flash. I'm at my wits end with this issue. I'm a web designer who uses flash in a number of my sites. VERY IRRITATING when my sites are not displayed correctly. Someone has one solution other than the pat Mozilla 'fixed '?

  I found the solution for shockwave does not.

  1. go in topic: addons

  2. make sure that "Shockwave for Director" is present

  3. look for "Mozilla ActiveX Control and Support of plugins"

  4 disable

  5. refresh the page

  It worked for me to get stuff flash shockwave works again.

  Edit: shockwave flash worked perfectly for me with my old together until I updated to 13, so it is certainly the issue of Mozilla, and after finding this solution, I'm sure of it.

• Satellite M45 - does not start after restoration on the new HARD drive

  I installed a new PATA 250 GB HDD on my pc. The BIOS is configured to boot from CD/DVD. Toshiba Recovery disk started cold, start follow-up statement to load a new system on the HARD drive. He made a (quick) format on the HARD drive, spent 50 minutes, copy the files from the CD to the new HARD drive. Followed the instructions to remove the CD and reboot the pc. Did. I get the Toshiba homepage for 2-3 seconds, and then I get a white screen with a white block cursor in the upper corner of the LH of the screen. Looks like it does not find the block on the HARD disk?
  The procedure of collection 3 times with the same results. Checked the BIOS to check that it is configured to boot from the HARD disk after installation.

  The recovery CD is blank. Never used because I bought the PC (3.5 years). Put the new HARD drive in a USB enclosure and formatted with Windows, tried again with the same result? Put the old HDD, PC starts and works very well. Put the live CD Knoppix and boot from that, works very well. See the new HARD drive.

  Thus, any suggestions are appreciated. The recovery CD Toshiba is defective? In any case to test?

  Thank you
  -J

  Hello

  Sounds like a problem with the recovery disk or the new HARD disk if your computer starts up fine with the old HARD drive...

  In your case before you start a lengthy discussion, you should try a Microsoft Windows disk to install Windows. If he work it seems that only the recovery disk is defective.

  Otherwise, the HARD disk must be defective. Maybe a bad sector or something else

• Satellite L30-134 does not access BIOS after upgrade with SSD

  Hello

  I have a problem with my old Toshiba L30-134.

  When I try to replace the old with new SSD HARD drive, I can't start BIOS.
  But when I remove the DVD-ROM laptop and leave there only SSD, then BIOS can start and I see the drive detected. DVD - ROM has PATA/IDE interface.

  I also tried IDE adapter SATA (like this: [adapter | http://goo.gl/W3TpXt]) for replacement of the DVD-ROM with second SATA HDD and I had the same problem when the disk was present in the adapter.

  When the second HARD drive was not present in the adapter, BIOS began. And it's not just about BIOS.

  Computer is blocking on startup TOSHIBA logo screen during the hardware detection and there is also no error message.

  I can't change the settings on the device SATA IDE/AHCI mode. Is there a workaround with riders or a software solution?

  Thanks for help

  Hello

  > When the second HARD drive was not present in the adapter, BIOS has begun. And it's not just about BIOS.

  You replaced the STRANGE with a HARD drive?
  It won't work buddy. The s laptop computer's optical disc drive supports IDE controller. The HARD drive seems to support the SATA controller.

  The laptop does not power upward because the POST (power on self-test) cannot be passed correctly. During POST the laptop s material will be checked for a possible malfunction or compatibility issues. In your case, the hardware is NOT compatible and that you can't change that.

• Need expert help! CD player does not read the contents of the disc. Help!

  I searched and tried everything what we can imagine and impossible to find a solution. I can also restore because I don't really know this error at startup. Here are the symptoms and fixes I've tried. If there is someone out there who could help me it would be greatly appreciated!
  

  System:, I have XP w/SP3 installed. Dual-Core 3.0 G w / 3G P5N72T - MB Ram, HD 300 G, Asus CD/DVD Drive.

  Symptoms:

  • I had my CD player connected via PATA ribbon cable and my hard drive connected via a SATA cable.
  • My CD player will not autorun when an installation disc is installed.
  • My CD player will not read or display the contents of the disc when I use the file Explorer.
  • My letter of CD drive is D:\ and always appear as one of the discs.
  • When I use the command "run" and type: D:\install or D:\setup a windows "disk is not formatted" error appears stating "Windows is unable to read the disc. The disk might be corrupted or it could be in a form that is not compatible with windows.
  • My Green CD player will sweep on and I can hear it turn every time I try to explore the files or after I insert a disc, but she never autoruns, or displays content.
  • I decided to buy a new SATA CD drive and installed, unfortunately it does not work either exact problems remain.
  • I have two CD drives to another computer and they both work. So I know this isn't the disc or the lens.
  • I ran the utility Microsoft Fix It and she finds nothing wrong.
  • I ran the TweakUI to make safe autoplay features are on.
  • I did all the registry fixes proposed by microsoft and online forums. i.e. upper and lower, filters etc.
  • I removed the device from Device Manager and reinstalled.
  • I ran a virus, spyware, malware, and everything is clean.
  • I have the latest version of the system bios and all settings are fine. Most are on Auto that are associated with the detection.
  • Type of device DMA modes are selected in automatic detection.
  • If I could read a disc that I could try to reinstall windows XP, but it is not an option now until my CD player is fixed!
  • I don't have any installed like Nero buring CD software.
  • I actually installed Nero Light to see if it would read a disc, and of course I can see the disk and copy its content to my hard drive or take an image of the disk.
  • I tried to rename the drive, disconnect the drive.
  • I'm sure I tried other things, but can't remember right now!

  Thanks for your help in advance!
  Mike

  Hi msavage2000,

  It seems you have tried most of the steps to solve this problem. However, we would like to know if the drive does recognize the drive?

  As we know readers work, I would like you to try a new PATA/IDE cable and check the result.

  With regard to:

  Samhrutha G S - Microsoft technical support.

  Visit our Microsoft answers feedback Forum and let us know what you think.

• Windows XP does not start, no hard drive error

  I have windows XP installed on my hard drive of 160 GB WD Scorpio Blue PATA on a DELL Latitude D600. One day, I wake up and my laptop does not start. My computer starts up, leaves POST, but the hard drive does not start. He's right there. I try pressing the buttons but it starts a sound signal, so I have to turn it off. Normally, if there is no device that my computer can boot from it displays something along the lines, "no main boot device found. Press F1 to retry boot or F2 to enter the configuration utility. "but the screen does not show anything.
  I ran chkdisk and a number of other diagnostic tools on the hard drive, but nothing helped. I have Ubuntu on a USB key and with him, I can access the files on the hard drive - all files are intact, and I can read/write without problems. It just does not start.
  How would I go about fixing this? Any help is appreciated. It is the third hard drive that has failed inside my D600 (my second WD). I've had enough of this!

  Try to use the last good known Configuration:

  http://support.Microsoft.com/kb/307852

  and see if that clears things up to the top.

  Hope this helps

  Post back if necessary

  ____________________

  If this post can help solve your problem, please click the 'Mark as answer' or 'Useful' at the top of this message. Marking a post as answer, or relatively useful, you help others find the answer more quickly.

• CHK DSK/r & CHK DSK/p does not solve blue screen UNMOUNTABLE BOOT VOLUME... any suggestions?

  Hi, need help please. After an update of windows, there was a couple of error message on my computer, and then one day, he came with a blue screen at the beginning by saying "UNMOUNTABLE BOOT VOLUME". OK, I googled and he said everywhere to have an installation CD (which I have) and then perform the CHK DSK/r, CHK DSK/p or CHK DSK/r/p that I did all 3. Then I typed in FIXBOOT c:... ok, well... seemed so I typed in the output. Blue screen again! He tried again and again without success. I would NOT be this format... we have a lot of customer files on this computer... ANYTHING else out there to try? I can't find any other information. Any help would be GREATLY appreciated. Thank you...!

  Hello - there was only 1 partition, and I think I know what it was. It was see the external hard drive - which I NOT formatted and works very well - and now that I have disconnected, he says "hard drive not found '. Now, I can not format the main computer! Should I rehook it? I just don't want this external hard drive to be formatted. How to format my computer (since CHK DSK does not work) with the CD? I just get the message 'cannot see the hard drive. Thanks for your help.

  N ° not re - hang. In fact, you must disconnect all devices from the computer except for your keyboard and your mouse. This includes, but is not limited to, your printer, card readers or other devices other than your cd rom of course media.

  The error you receive is probably due to your SATA controller driver is not being installed. Restart the computer and enter the bios. See if you can find the option to disable the AHCI or RAID and IDE SATA (SATA/PATA) emulation mode. Windows should detect your hard drive.

  Finally, if you are unable to find the option to turn off the AHCI/RAID mode, provide me the full brand and the model number of your computer.

  I do not vote for me I'm not here for points. If this post helps you, vote. Visit my forum @ http://repairbotsonline.com/

• DeskJet F4480: full black print cartridge still does not print black. Colors OK.

  What the title says. All of a sudden my Deskjet F4480 does not print black. All cartridges are almost nine (changed recently, bought at Staples). Colour printing is OK. Print a page with black text and results in only the images printing color images. I only went through all the steps of cleaning cartridge several times, no difference. There is no error message, just black not appear do not at all.

  And... Here is the solution.

  Funny how I found an explanation of the problem and how to fix it on a different printer manufacturer's Web site, but not on HP... But I digress.

  The black cartridge has been blocked. The way of difficulty is:

  1. remove the faulty cartridge from the printer.

  2. place a small amount of boiling water in a cup (about 1/4 in.) and dunk of the print head (the part where the ink comes out) in warm water for a minute. Do not immerse the entire cartridge in hot water, just the print head.

  3 take it out, pat against a paper towel, observe the model ink left in the cartridge on the towel. If too little / interrupted, dunk again in hot water for another minute, pat again. You want to get an unbroken line of ink through the length of the print head. Repeat as needed (I did 4 times total).

  4 cartridge Pat dry everywhere, put it back in the printer, run cleaning cycles (1 - 2).

  5. If still not good fixed, take out the cartridge and repeat 2 (I had to do it again).

  You will lose little ink, cartridge of bad and good a well (you can not run cycles with only 1 cleaning cartridge), but at least you won't have to throw a nearly full cartridge.

• Envy20 d030 than all in One does not start

  A week ago, after I downloaded Win 8.1, I received a notice about the HP updates.  I did the updates, but the next morning, the computer does not start and the ports or the CD player also would not work.  I tried F10 and F12 but got nothing.  I do not remember the specific message there was, but it would not move from the initial start-up phase.  I took it to a repair shop and they told me that the BIOS has been altered, as well as areas of the hard disk; the 4 MB of ram card was also burned (we had a lot of lightning, so I don't know if that had nothing to do with this and no more than technicians).  The MOBO extracted fine.  I replaced the hard drive and let the 2 MB of ram.  Everything seemed fine.

  Yesterday, I tried to replace the features and specifications of the factory.  I was last updated drivers and rebooted the computer to complete the installation of the system, but the computer wouldn't even start.  HP turns on but it then immediately goes to an error message "no boot disk was detected or the drive failed.  F10 and F12 nothing else that the CD player and the USB ports seem to be ok.  I remember that the updates was a BIOS.  When you perform this update there was a message to be formatted a sector of the hard disk (sector F) but has no so I cancelled it.

  Data sheet (current): Envy20 d030 Touch Smart All-In-one

  Windows 8.1

  64 bit

  2 MB of Ram

  1 TB harddrive

  I hope this is enough information for someone to help me.  My questions are; That's happened?  How can I solve this problem?  If I order a HP recovery package that will, as much as there is a new hard drive in the machine.

  I'm very frustrated about that.  Not only by problems and my loss of use of my computer, but also costs I hired.  I have had many computers and I'm pretty tech savvy but nothing like this has ever happened to me before.

  Thank you

  Pat - D

  Hello again Pat-D,

  The recovery disks will be won't on which hard drive you have installed. Your computer comes with a 1 to SATA HDD with a rotation speed of 7200 RPM. If you have another hard drive in there and recognize your computer, you should be good to go.

  I hope that I have answered your question to your satisfaction. Thanks for posting on the HP Forums. Have a great day!

• RV042G VPN Client to gateway does not

  I try to set up VPN on my new RV042G, but may not have to work.

  I try to use the gateway client and want to connect my laptop to the router with a vpn as screwsoft or greenbow client.

  How I set up, it does not connect. After doing some scans of port, I discovered that it opens all ports. After having turned off the firewall, that he still does not seem a suitable open. (I expect 500 for ipsec).

  can someone help me out here? PPTP seems only open ports when activated, but I don't want to use it.

  Hi Ronald,.

  Found it please the attachment file how to configure ShrewVPN with RV0xx, just to be sure that the configuration is of course RV042 and shrewVPN

  Please rate this post or marked as replied to help other customers of Cisco

  Greetings

  Mehdi

• ASA 5505. VPN Site-to-Site does not connect!

  Hello!
  Already more than a week there, as we had a new channel of communication of MGTSa (Ontario terminal Sercomm RV6688BCM, who barely made in the 'bridge' - had to do the provider in order to receive our white Cisco Ip address), and now I train as well more that one week to raise between our IKEv1 IPsec Site-to-Site VPN tunnel closes offices.
  Configurable and use the wizard in ASDM and handles in the CLI, the result of a year, the connection does not rise.
  Cisco version 9.2 (2), the image of the Cisco asa922 - k8.bin, Security Plus license version, version 7.2 AMPS (2).
  What I'll never know...
  Debugging and complete configuration enclose below.
  Help, which can follow any responses, please! I was completely exhausted!

  Config:

  Output of the command: "sh run".

  : Saved
  :
  : Serial: XXXXXXXXXXXX
  : Material: ASA5505, 512 MB RAM, 500 MHz Geode Processor
  :
  ASA Version 9.2 (2)
  !
  hostname door-71
  activate the encrypted password of F6OJ0GOws7WHxeql
  names of
  IP local pool vpnpool 10.1.72.100 - 10.1.72.120 mask 255.255.255.0
  !
  interface Ethernet0/0
  switchport access vlan 2
  !
  interface Ethernet0/1
  !
  interface Ethernet0/2
  !
  interface Ethernet0/3
  !
  interface Ethernet0/4
  !
  interface Ethernet0/5
  !
  interface Ethernet0/6
  !
  interface Ethernet0/7
  !
  interface Vlan1
  nameif inside
  security-level 100
  IP 10.1.72.254 255.255.255.0
  !
  interface Vlan2
  nameif outside_mgts
  security-level 0
  62.112.100.R1 255.255.255.252 IP address
  !
  passive FTP mode
  clock timezone 3 MSK/MSD
  clock to DST MSK/MDD recurring last Sun Mar 02:00 last Sun Oct 03:00
  DNS lookup field inside
  DNS server-group MGTS
  Server name 195.34.31.50
  permit same-security-traffic inter-interface
  permit same-security-traffic intra-interface
  network obj_any object
  subnet 0.0.0.0 0.0.0.0
  network of the NET72 object
  10.1.72.0 subnet 255.255.255.0
  network object obj - 0.0.0.0
  host 0.0.0.0
  network of the Nafanya object
  Home 10.1.72.5
  network object obj - 10.1.72.0
  10.1.72.0 subnet 255.255.255.0
  network of the NET61 object
  10.1.61.0 subnet 255.255.255.0
  network of the NETWORK_OBJ_10.1.72.96_27 object
  subnet 10.1.72.96 255.255.255.224
  network of the NETT72 object
  10.1.72.0 subnet 255.255.255.0
  network of the NET30 object
  10.1.30.0 subnet 255.255.255.0
  network of the NETWORK_OBJ_10.1.72.0_24 object
  10.1.72.0 subnet 255.255.255.0
  object-group service OG INET
  the purpose of the echo icmp message service
  response to echo icmp service object
  service-object icmp traceroute
  service-object unreachable icmp
  service-purpose tcp - udp destination eq echo
  the DM_INLINE_NETWORK_1 object-group network
  network-object NET30
  network-object, object NET72
  DM_INLINE_TCP_1 tcp service object-group
  port-object eq www
  EQ object of the https port
  inside_access_in extended access list permit ip object NET72 object-group DM_INLINE_NETWORK_1
  access extensive list ip 10.1.72.0 inside_access_in allow 255.255.255.0 any
  inside_access_in extended access list permit ip object Nafanya any idle state
  inside_access_in list extended access allowed object-group OG INET an entire
  inside_access_in of access allowed any ip an extended list
  inside_access_in list extended access deny ip any alerts on any newspaper
  outside_mgts_access_in list extended access allowed object-group OG INET an entire
  outside_mgts_access_in list extended access permit tcp any any DM_INLINE_TCP_1 object-group
  outside_mgts_access_in list extended access deny ip any alerts on any newspaper
  access extensive list ip 10.1.72.0 outside_mgts_cryptomap allow 255.255.255.0 object NET61
  VPN-ST_splitTunnelAcl permit 10.1.72.0 access list standard 255.255.255.0
  pager lines 24
  Enable logging
  asdm of logging of information
  Within 1500 MTU
  outside_mgts MTU 1500
  IP check path reverse interface outside_mgts
  no failover
  ICMP unreachable rate-limit 1 burst-size 1
  don't allow no asdm history
  ARP timeout 14400
  no permit-nonconnected arp
  NAT (inside outside_mgts) static source NET72 NET72 NETWORK_OBJ_10.1.72.96_27 NETWORK_OBJ_10.1.72.96_27 non-proxy-arp-search of route static destination
  NAT (inside outside_mgts) static source NETWORK_OBJ_10.1.72.0_24 NETWORK_OBJ_10.1.72.0_24 NET61 NET61 non-proxy-arp-search of route static destination
  !
  network obj_any object
  NAT (inside outside_mgts) dynamic obj - 0.0.0.0
  network of the NET72 object
  NAT (inside outside_mgts) interface dynamic dns
  inside_access_in access to the interface inside group
  Access-group outside_mgts_access_in in the outside_mgts interface
  Route 0.0.0.0 outside_mgts 0.0.0.0 62.112.100.R 1
  Timeout xlate 03:00
  Pat-xlate timeout 0:00:30
  Timeout conn 01:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
  Sunrpc timeout 0:10:00 h323 0:05:00 h225 mgcp from 01:00 0:05:00 mgcp-pat 0:05:00
  Sip timeout 0:30:00 sip_media 0:02:00 prompt Protocol sip-0: 03:00 sip - disconnect 0:02:00
  Timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
  timeout tcp-proxy-reassembly 0:01:00
  Floating conn timeout 0:00:00
  dynamic-access-policy-registration DfltAccessPolicy
  without activating the user identity
  identity of the user by default-domain LOCAL
  AAA authentication http LOCAL console
  the ssh LOCAL console AAA authentication
  Enable http server
  http 10.1.72.0 255.255.255.0 inside
  No snmp server location
  No snmp Server contact
  Crypto ipsec transform-set ikev1 ESP-AES-128-SHA aes - esp esp-sha-hmac
  Crypto ipsec transform-set ikev1 ESP-AES-128-MD5-esp - aes esp-md5-hmac
  Crypto ipsec transform-set ikev1 ESP-AES-192-SHA esp-aes-192 esp-sha-hmac
  Crypto ipsec transform-set ikev1 ESP-AES-192-MD5 esp-aes-192 esp-md5-hmac
  Crypto ipsec transform-set ikev1 ESP-AES-256-SHA esp-aes-256 esp-sha-hmac
  Crypto ipsec transform-set ikev1 ESP-AES-256-MD5 esp-aes-256 esp-md5-hmac
  Crypto ipsec transform-set ikev1 ESP-AES-128-SHA-TRANS-aes - esp esp-sha-hmac
  Crypto ipsec ikev1 transform-set ESP-AES-128-SHA-TRANS mode transit
  Crypto ipsec transform-set ikev1 ESP-AES-128-MD5-TRANS-aes - esp esp-md5-hmac
  Crypto ipsec ikev1 transform-set ESP-AES-128-MD5-TRANS mode transit
  Crypto ipsec transform-set ikev1 ESP-AES-192-SHA-TRANS esp-aes-192 esp-sha-hmac
  Crypto ipsec ikev1 transform-set ESP-AES-192-SHA-TRANS mode transit
  Crypto ipsec transform-set ikev1 ESP-AES-192-MD5-TRANS esp-aes-192 esp-md5-hmac
  Crypto ipsec ikev1 transform-set ESP-AES-192-MD5-TRANS mode transit
  Crypto ipsec transform-set ikev1 ESP-AES-256-SHA-TRANS esp-aes-256 esp-sha-hmac
  Crypto ipsec ikev1 transform-set ESP-AES-256-SHA-TRANS mode transit
  Crypto ipsec transform-set ikev1 ESP-AES-256-MD5-TRANS esp-aes-256 esp-md5-hmac
  Crypto ipsec ikev1 transform-set ESP-AES-256-MD5-TRANS mode transit
  Crypto ipsec transform-set ikev1 SHA-ESP-3DES esp-3des esp-sha-hmac
  Crypto ipsec transform-set ikev1 ESP-3DES-MD5-esp-3des esp-md5-hmac
  Crypto ipsec transform-set ikev1 ESP-3DES-SHA-TRANS esp-3des esp-sha-hmac
  Crypto ipsec ikev1 transform-set ESP-3DES-SHA-TRANS mode transit
  Crypto ipsec transform-set ikev1 ESP-3DES-MD5-TRANS esp-3des esp-md5-hmac
  Crypto ipsec ikev1 transform-set ESP-3DES-MD5-TRANS mode transit
  Crypto ipsec transform-set ikev1 ESP-DES-SHA esp - esp-sha-hmac
  Crypto ipsec transform-set ikev1 esp ESP-DES-MD5-esp-md5-hmac
  Crypto ipsec transform-set ikev1 ESP-DES-SHA-TRANS esp - esp-sha-hmac
  Crypto ipsec ikev1 transform-set ESP-DES-SHA-TRANS mode transit
  Crypto ipsec transform-set ikev1 ESP-DES-MD5-TRANS esp - esp-md5-hmac
  Crypto ipsec ikev1 transform-set ESP-DES-MD5-TRANS mode transit
  Crypto ipsec ikev2 AES256 ipsec-proposal
  Protocol esp encryption aes-256
  Esp integrity sha - 1, md5 Protocol
  Crypto ipsec ikev2 ipsec-proposal AES192
  Protocol esp encryption aes-192
  Esp integrity sha - 1, md5 Protocol
  Crypto ipsec ikev2 ipsec-proposal AES
  Esp aes encryption protocol
  Esp integrity sha - 1, md5 Protocol
  Crypto ipsec ikev2 proposal ipsec 3DES
  Esp 3des encryption protocol
  Esp integrity sha - 1, md5 Protocol
  Crypto ipsec ikev2 ipsec-proposal OF
  encryption protocol esp
  Esp integrity sha - 1, md5 Protocol
  Crypto ipsec pmtu aging infinite - the security association
  crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 pfs Group1 set
  crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 define ikev1 transform-set ESP-AES-128-SHA ESP-AES-128-MD5 ESP-AES-192-SHA ESP-AES-192-MD5 ESP-AES-256-SHA ESP-AES-256-MD5 ESP-3DES-SHA MD5-ESP-3DES ESP-DES-SHA ESP-DES-MD5
  crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 define ikev2 AES256 AES192 AES 3DES ipsec-proposal OF
  card crypto outside_mgts_map 1 match address outside_mgts_cryptomap
  card crypto outside_mgts_map 1 set pfs Group1
  peer set card crypto outside_mgts_map 1 91.188.180.42
  card crypto outside_mgts_map 1 set ikev1 transform-set ESP-AES-128-SHA ESP-AES-128-MD5 ESP-AES-192-SHA ESP-AES-192-MD5 ESP-AES-256-SHA ESP-AES-256-MD5 ESP-3DES-SHA MD5-ESP-3DES ESP-DES-SHA ESP-DES-MD5
  outside_mgts_map card crypto 65535-isakmp dynamic ipsec SYSTEM_DEFAULT_CRYPTO_MAP
  card crypto outside_mgts_map interface outside_mgts
  inside_map card crypto 65535-isakmp dynamic ipsec SYSTEM_DEFAULT_CRYPTO_MAP
  inside crypto map inside_map interface
  Crypto ca trustpoint ASDM_TrustPoint0
  registration auto
  E-mail [email protected] / * /
  name of the object CN = door-71
  Serial number
  IP address 62.112.100.42
  Proxy-loc-transmitter
  Configure CRL
  Crypto ca trustpoint ASDM_TrustPoint1
  registration auto
  ASDM_TrustPoint1 key pair
  Configure CRL
  trustpool crypto ca policy
  string encryption ca ASDM_TrustPoint0 certificates
  certificate eff26954
  30820395 3082027d a0030201 020204ef f2695430 0d06092a 864886f7 0d 010105
  019
  6460ae26 ec5f301d 0603551d 0e041604 14c9a3f2 d70e6789 38fa4b01 465d 1964
  60ae26ec 5f300d06 092 has 8648 01050500 03820101 00448753 7baa5c77 86f70d01
  62857b 65 d05dc91e 3edfabc6 7b3771af bbedee14 673ec67d 3d0c2de4 b7a7ac05
  5f203a8c 98ab52cf 076401e5 1a2c6cb9 3f7afcba 52c617a5 644ece10 d6e1fd7d
  28b57d8c aaf49023 2037527e 9fcfa218 9883191f 60b221bf a561f2be d6882091
  0222b7a3 3880d6ac 49328d1f 2e085b15 6d1c1141 5f850e5c b6cb3e67 0e373591
  94a 82781 44493217 and 38097952 d 003 5552 5c445f1f 92f04039 a23fba20 b9d51b13
  f511f311 d1feb2bb 6d056a15 7e63cc1b 1f134677 8124c 024 3af56b97 51af8253
  486844bc b1954abe 8acd7108 5e4212df db835d76 98ffdb2b 8c8ab915 193b 8167
  0db3dd54 c8346b96 c4f4eff7 1e7cd576 a8b1f86e 3b868a6e 89
  quit smoking
  string encryption ca ASDM_TrustPoint1 certificates
  certificate a39a2b54
  3082025f 30820377 a0030201 020204 has 3 9a2b5430 0d06092a 864886f7 0d 010105
  0500304 06035504 03130767 36313137 30120603 55040513 6174652d 3110300e b
     
  c084dcd9 d250e194 abcb3eb8 1da93bd0 fb0dba1a b1c35b43 d547a841 5d4ee1a4
  14bdb207 7dd790a4 0cd 70471 5f3a896a 07bd56dc ea01b3dd 254cde88 e1490e97
  f3e54c05 551adde0 66aa3782 c85880c2 b162ec29 4e49346a df71062d 6d6d8f49
  62b9de93 ba07b4f7 a50e77e1 8f54b32b 6627cb27 e982b36f a 362973, 0 88de3272
  9bd6d4d2 8ca1e11f 214f20a9 78bdea95 78fdc45c d6d45674 6acb9bcb d0bd930e
  638eedfe cd559ab1 e1205c48 3ee9616f e631db55 e82b623c 434ffdc1 11020301
  0001 has 363 3061300f 0603551d 130101ff 0101ff30 04053003 0e060355 1d0f0101
  ff040403 1f060355 02018630 230418 30168014 0cea70bf 0d0e0c4b eb34a0b1 1 d
  8242 has 549 0603 551d0e04 1604140c ea70bf0d 0e0c4beb 34a0b182 301D 5183ccf9
  42a 54951 010105 05000382 0101004e 7bfe054a 0d 864886f7 0d06092a 83ccf930
  d434a27c 1d3dce15 529bdc5f 70a2dff1 98975de9 2a97333b 96077966 05a8e9ef
  bf320cbd ecec3819 ade20a86 9aeb5bde bd129c7b 29341e4b edf91473 f2bf235d
  9aaeae21 a629ccc6 3c79200b b9a89b08 bf38afb6 ea56b957 4430f692 a 4745, 411
  34d71fad 588e4e18 2b2d97af b2aae6b9 b6a22350 d031615b 49ea9b9f 2fdd82e6
  ebd4dccd df93c17e deceb796 f268abf1 881409b 5 89183841 f484f0e7 bd5f7b69
  ebf7481c faf69d3e 9d24df6e 9c2b0791 785019f7 a0d20e95 2ef35799 66ffc819
  4a77cdf2 c6fb4380 fe94c13c d4261655 7bf3d6ba 6289dc8b f9aad4e1 bd918fb7
  32916fe1 477666ab c2a3d591 a84dd435 51711f6e 93e2bd84 89884c
  quit smoking
  crypto isakmp identity address
  IKEv2 crypto policy 1
  aes-256 encryption
  integrity sha
  Group 2 of 5
  FRP sha
  second life 86400
  IKEv2 crypto policy 10
  aes-192 encryption
  integrity sha
  Group 2 of 5
  FRP sha
  second life 86400
  IKEv2 crypto policy 20
  aes encryption
  integrity sha
  Group 2 of 5
  FRP sha
  second life 86400
  IKEv2 crypto policy 30
  3des encryption
  integrity sha
  Group 2 of 5
  FRP sha
  second life 86400
  IKEv2 crypto policy 40
  the Encryption
  integrity sha
  Group 2 of 5
  FRP sha
  second life 86400
  Crypto ikev2 activate outside_mgts port 443 customer service
  Crypto ikev2 access remote trustpoint ASDM_TrustPoint0
  Crypto ikev1 allow inside
  Crypto ikev1 enable outside_mgts
  IKEv1 crypto policy 10
  authentication crack
  aes-256 encryption
  sha hash
  Group 2
  life 86400
  IKEv1 crypto policy 20
  authentication rsa - sig
  aes-256 encryption
  sha hash
  Group 2
  life 86400
  IKEv1 crypto policy 30
  preshared authentication
  aes-256 encryption
  sha hash
  Group 2
  life 86400
  IKEv1 crypto policy 40
  authentication crack
  aes-192 encryption
  sha hash
  Group 2
  life 86400
  IKEv1 crypto policy 50
  authentication rsa - sig
  aes-192 encryption
  sha hash
  Group 2
  life 86400
  IKEv1 crypto policy 60
  preshared authentication
  aes-192 encryption
  sha hash
  Group 2
  life 86400
  IKEv1 crypto policy 70
  authentication crack
  aes encryption
  sha hash
  Group 2
  life 86400
  IKEv1 crypto policy 80
  authentication rsa - sig
  aes encryption
  sha hash
  Group 2
  life 86400
  IKEv1 crypto policy 90
  preshared authentication
  aes encryption
  sha hash
  Group 2
  life 86400
  IKEv1 crypto policy 100
  authentication crack
  3des encryption
  sha hash
  Group 2
  life 86400
  IKEv1 crypto policy 110
  authentication rsa - sig
  3des encryption
  sha hash
  Group 2
  life 86400
  IKEv1 crypto policy 120
  preshared authentication
  3des encryption
  sha hash
  Group 2
  life 86400
  IKEv1 crypto policy 130
  authentication crack
  the Encryption
  sha hash
  Group 2
  life 86400
  IKEv1 crypto policy 140
  authentication rsa - sig
  the Encryption
  sha hash
  Group 2
  life 86400
  IKEv1 crypto policy 150
  preshared authentication
  the Encryption
  sha hash
  Group 2
  life 86400
  Telnet timeout 5
  without ssh stricthostkeycheck
  SSH 10.1.72.0 255.255.255.0 inside
  SSH timeout 60
  SSH group dh-Group1-sha1 key exchange
  Console timeout 0
  vpnclient Server 91.188.180.X
  vpnclient mode network-extension-mode
  vpnclient nem-st-autoconnect
  VPN - L2L vpnclient vpngroup password *.
  vpnclient username aradetskayaL password *.
  dhcpd auto_config outside_mgts
  !
  dhcpd update dns replace all two interface inside
  !
  a basic threat threat detection
  Statistics-list of access threat detection
  no statistical threat detection tcp-interception
  SSL-trust ASDM_TrustPoint0 inside point
  SSL-trust ASDM_TrustPoint0 outside_mgts point
  WebVPN
  Select outside_mgts
  internal GroupPolicy_91.188.180.X group strategy
  attributes of Group Policy GroupPolicy_91.188.180.X
  Ikev1 VPN-tunnel-Protocol
  internal group VPN - ST strategy
  attributes of group VPN - ST policy
  value of 195.34.31.50 DNS Server 8.8.8.8
  Ikev1 VPN-tunnel-Protocol
  Split-tunnel-policy tunnelspecified
  Split-tunnel-network-list value VPN-ST_splitTunnelAcl
  by default no
  aradetskayaL encrypted HR3qeva85hzXT6KK privilege 15 password username
  tunnel-group 91.188.180.X type ipsec-l2l
  attributes global-tunnel-group 91.188.180.X
  Group - default policy - GroupPolicy_91.188.180.42
  IPSec-attributes tunnel-group 91.188.180.X
  IKEv1 pre-shared-key *.
  remote control-IKEv2 pre-shared-key authentication *.
  remotely IKEv2 authentication certificate
  pre-shared-key authentication local IKEv2 *.
  remote access to tunnel-group VPN - ST type
  VPN-general ST-attributes tunnel-group
  address vpnpool pool
  Group Policy - by default-VPN-ST
  tunnel-group ipsec VPN ST-attributes
  IKEv1 pre-shared-key *.
  !
  class-map inspection_default
  match default-inspection-traffic
  !
  !
  type of policy-card inspect dns preset_dns_map
  parameters
  maximum message length automatic of customer
  message-length maximum 512
  Policy-map global_policy
  class inspection_default
  inspect the preset_dns_map dns
  inspect the ftp
  inspect h323 h225
  inspect the h323 ras
  inspect the rsh
  inspect the rtsp
  inspect sqlnet
  inspect the skinny
  inspect sunrpc
  inspect xdmcp
  inspect the sip
  inspect the netbios
  inspect the tftp
  Review the ip options
  inspect the icmp
  inspect the icmp error
  !
  global service-policy global_policy
  context of prompt hostname
  no remote anonymous reporting call
  Cryptochecksum:212e4f5035793d1c219fed57751983d8
  : end

  door-71 # sh crypto ikev1 his

  There are no SAs IKEv1

  door-71 # sh crypto ikev2 his

  There are no SAs IKEv2

  door-71 # sh crypto ipsec his

  
  There is no ipsec security associations
  door-71 # sh crypto isakmp

  There are no SAs IKEv1

  There are no SAs IKEv2

  Global statistics IKEv1
  The active Tunnels: 0
  Previous Tunnels: 0
  In bytes: 0
  In the packages: 0
  In packs of fall: 0
  In Notifys: 0
  In the constituencies of P2: 0
  In P2 invalid Exchange: 0
  In P2 Exchange rejects: 0
  Requests for removal in his P2: 0
  Bytes: 0
  Package: 0
  Fall packages: 0
  NOTIFYs out: 0

  
  Exchanges of P2: 0
  The Invalides Exchange P2: 0
  Exchange of P2 rejects: 0
  Requests to remove on P2 Sa: 0
  Tunnels of the initiator: 0
  Initiator fails: 0
  Answering machine fails: 0
  Ability system breaks down: 0
  AUTH failed: 0
  Decrypt failed: 0
  Valid hash fails: 0
  No failure his: 0

  IKEV1 statistics for Admission appeals
  In negotiating SAs Max: 25
  In negotiating SAs: 0
  In negotiating SAs Highwater: 0
  In negotiating SAs rejected: 0

  Global statistics IKEv2
  The active Tunnels: 0
  Previous Tunnels: 0
  In bytes: 0
  In the packages: 0
  In packs of fall: 0
  In Fragments of fall: 0
  In Notifys: 0
  In Exchange for the P2: 0
  In P2 invalid Exchange: 0
  In P2 Exchange rejects: 0
  In IPSEC delete: 0
  In delete IKE: 0
  Bytes: 0
  Package: 0
  Fall packages: 0
  Fragments of fall: 0
  NOTIFYs out: 0
  Exchange of P2: 0
  The Invalides Exchange P2: 0
  Exchange of P2 rejects: 0
  On IPSEC delete: 0
  The IKE Delete: 0
  Locally launched sAs: 0
  Locally launched sAs failed: 0
  SAs remotely initiated: 0
  SAs remotely initiated failed: 0
  System capacity: 0
  Authentication failures: 0
  Decrypt failures: 0
  Hash failures: 0
  Invalid SPI: 0
  In the Configs: 0
  Configs: 0
  In the Configs rejects: 0
  Configs rejects: 0
  Previous Tunnels: 0
  Previous Tunnels wraps: 0
  In the DPD Messages: 0
  The DPD Messages: 0
  The NAT KeepAlive: 0
  IKE recomposition launched locally: 0
  IKE returned to the remote initiated key: 0
  Generate a new key CHILD initiated locally: 0
  CHILD given to the remote initiated key: 0

  IKEV2 statistics for Admission appeals
  Max active SAs: no limit
  Max in negotiating SAs: 50
  Challenge cookie line: never
  Active sAs: 0
  In negotiating SAs: 0
  Incoming requests: 0
  Accepted incoming requests: 0
  A rejected incoming requests: 0
  Out of requests: 0
  Out of the applications accepted: 0
  The outgoing rejected requests: 0
  A rejected queries: 0
  Rejected at the SA: 0 Max limit
  Rejected low resources: 0
  Rejected the current reboot: 0
  Challenges of cookie: 0
  Cookies transmitted challenges: 0
  Challenges of cookie failed: 0

  IKEv1 global IPSec over TCP statistics
  --------------------------------
  Embryonic connections: 0
  Active connections: 0
  Previous connections: 0
  Incoming packets: 0
  Inbound packets ignored: 0
  Outgoing packets: 0
  Outbound packets ignored: 0
  The RST packets: 0
  Heartbeat Recevied ACK packets: 0
  Bad headers: 0
  Bad trailers: 0
  Chess timer: 0
  Checksum errors: 0
  Internal error: 0

   
  door-71 # sh statistical protocol all cryptographic
  [Statistics IKEv1]
  Encrypt packets of requests: 0
  Encapsulate packets of requests: 0
  Decrypt packets of requests: 0
  Decapsulating requests for package: 0
  HMAC calculation queries: 0
  ITS creation queries: 0
  SA asked to generate a new key: 0
  Deletion requests: 0
  Next phase of allocation key applications: 0
  Number of random generation queries: 0
  Failed requests: 0
  [Statistics IKEv2]
  Encrypt packets of requests: 0
  Encapsulate packets of requests: 0
  Decrypt packets of requests: 0
  Decapsulating requests for package: 0
  HMAC calculation queries: 0
  ITS creation queries: 0
  SA asked to generate a new key: 0
  Deletion requests: 0
  Next phase of allocation key applications: 0
  Number of random generation queries: 0
  Failed requests: 0
  [IPsec statistics]
  Encrypt packets of requests: 0
  Encapsulate packets of requests: 0
  Decrypt packets of requests: 0
  Decapsulating requests for package: 0
  HMAC calculation queries: 0
  
  ITS creation queries: 0
  SA asked to generate a new key: 0
  Deletion requests: 0
  Next phase of allocation key applications: 0
  Number of random generation queries: 0
  Failed requests: 0
  [SSL statistics]
  Encrypt packets of queries: 19331
  Encapsulate packets of queries: 19331
  Decrypt packets of queries: 437
  Package requests decapsulating: 437
  HMAC calculation queries: 19768
  ITS creation queries: 178
  SA asked to generate a new key: 0
  Requests to remove SA: 176
  Next phase of allocation key applications: 0
  Number of random generation queries: 0
  Failed requests: 0
  [Statistical SSH are not taken in charge]
  [Statistics SRTP]
  Encrypt packets of requests: 0
  Encapsulate packets of requests: 0
  Decrypt packets of requests: 0
  Decapsulating requests for package: 0
  HMAC calculation queries: 0
  ITS creation queries: 0
  SA asked to generate a new key: 0
  Deletion requests: 0
  Next phase of allocation key applications: 0
  Number of random generation queries: 0
  Failed requests: 0
  [Statistics]
  Encrypt packets of requests: 0
  Encapsulate packets of requests: 0
  Decrypt packets of requests: 0
  Decapsulating requests for package: 0
  HMAC calculation queries: 6238
  ITS creation queries: 0
  SA asked to generate a new key: 0
  Deletion requests: 0
  Next phase of allocation key applications: 0
  Number of queries random generation: 76
  Failure of queries: 9

  door-71 # sh crypto ca trustpoints

  Trustpoint ASDM_TrustPoint0:
  Configured for the production of a self-signed certificate.

  Trustpoint ASDM_TrustPoint1:
  Configured for the production of a self-signed certificate.

  If you need something more, then spread!
  Please explain why it is that I don't want to work?

  Hello

  When the IPSEC tunnel does not come to the top, the first thing comes to my mind is to run a tracer of package from the CLI and the phases in it. Please run this command from your firewall side and share the output. I've just compiled this command with the random ip address and ports of your given range.

  Packet-trace entry inside tcp 10.1.72.2 1233 10.1.61.2 443 detailed

  Best regards

  Amandine

• Cisco forwarding port does not

  Dear experts, I got a production Firewall (Cisco Pix 515e 6.3 (1)) and I have set up to allow access to the outside on a server (SSH only).

  The server is 10.0.5.200.

  External IP is a.b.c.d. (should I use the FW outside the IP address of the interface?)

  Here's the sanitized output:

  6.3 (1) version PIX

  interface ethernet0 100full

  interface ethernet1 100full

  Auto interface ethernet2

  interface ethernet3 100full

  Automatic stop of interface ethernet4

  Automatic stop of interface ethernet5

  ethernet0 nameif outside security0

  nameif ethernet1 inside the security100

  nameif ethernet2 provider interieure4

  nameif dmz security99 ethernet3

  nameif ethernet4 intf4 security8

  ethernet5 intf5 security10 nameif

  activate the encrypted password of XXXXXXXXXXXXXXXX

  passwd encrypted XXXXXXXXXXXXXXXXXX

  IP address outside a.b.c.d 255.255.255.240

  IP address inside 10.0.1.254 255.255.255.0

  provider address IP X.X.X.X 255.255.255.0

  dmz X.X.X.X 255.255.255.0 IP address

  ARP timeout 14400

  Global 1 interface (outside)

  NAT (inside) 0 access-list sheep

  NAT (inside) 1 10.0.1.0 255.255.255.0 0 0

  Timeout xlate 03:00

  Timeout conn 01:00 half-closed 0:10:00 udp 0: CPP 02:00 0:10:00 01:00 h225

  H323 timeout 0:05:00 mgcp 0: sip from 05:00 0:30:00 sip_media 0:02:00

  Timeout, uauth 0:05:00 absolute

  GANYMEDE + Protocol Ganymede + AAA-server

  RADIUS Protocol RADIUS AAA server

  AAA-server local LOCAL Protocol

  the ssh LOCAL console AAA authentication

  NTP server 192.43.244.18 prefer external source

  NTP server 128.102.16.2 source outdoors

  Enable http server

  6.3 (1) version PIX

  interface ethernet0 100full

  interface ethernet1 100full

  Auto interface ethernet2

  interface ethernet3 100full

  Automatic stop of interface ethernet4

  Automatic stop of interface ethernet5

  ethernet0 nameif outside security0

  nameif ethernet1 inside the security100

  nameif ethernet2 provider interieure4

  nameif dmz security99 ethernet3

  nameif ethernet4 intf4 security8

  ethernet5 intf5 security10 nameif

  activate pnxJXWf9kU.x7YfY encrypted password

  WL6KtWnsAjAQS2yI encrypted passwd

  outside_access_in ip access list allow a whole

  access list outside-access enable icmp a whole

  access-list DMZ_access_in allow icmp a whole

  IP address outside a.b.c.d 255.255.255.240
  IP address inside 10.0.1.254 255.255.255.0
  provider address IP X.X.X.X 255.255.255.0
  dmz X.X.X.X 255.255.255.0 IP address

  ARP timeout 14400
  Global 1 interface (outside)
  NAT (inside) 0 access-list sheep
  NAT (inside) 1 10.0.1.0 255.255.255.0 0 0

  Timeout xlate 03:00
  Timeout conn 01:00 half-closed 0:10:00 udp 0: CPP 02:00 0:10:00 01:00 h225
  H323 timeout 0:05:00 mgcp 0: sip from 05:00 0:30:00 sip_media 0:02:00
  Timeout, uauth 0:05:00 absolute
  GANYMEDE + Protocol Ganymede + AAA-server
  RADIUS Protocol RADIUS AAA server
  AAA-server local LOCAL Protocol
  the ssh LOCAL console AAA authentication
  NTP server 192.43.244.18 prefer external source
  NTP server 128.102.16.2 source outdoors
  Enable http server

  Those in bold are the commands that I added:

  static (inside, outside) tcp a.b.c.d 2022 10.0.5.200 ssh netmask 255.255.255.255 0.0

  access-list 100 permit tcp any host a.b.c.d eq 2022

  Allow Access - list 101 tcp 10.0.5.200 eq 22 a

  Access-group 100 in external interface

  Access-group 101 in the interface inside

  When you access from the Wan, I used putty SSH port 2022 a.b.c.d IP in and he gave me of waiting times. I used the:

  Capture interface capo outside access-group 100

  The results were (that I can remember that I am not on site):

  My WAN IP-> a.b.c.d (R)

  My WAN IP-> a.b.c.d (S)

  My WAN IP-> a.b.c.d (S)

  My WAN IP-> a.b.c.d (S)

  The server on the internal LAN access is great and I can access port 22 on the server on the local network (Note: there is a L3 switch in the environment and inside the IP segments are 10.0.1.0/24 and 10.0.5.0/24 routable both.)

  This is what I did so far and would like more ideas on this subject that I am currently facing to. thanks!

  Hello

  Configuring static PAT (Port Forward) seemed correct to me.

  If you use the IP address of ' outside ' interface you would generally configure the parameter "interface" , and not the IP address.

  public static interface 2022 22 netmask 255.255.255.255 tcp (indoor, outdoor) 10.0.5.200

  Of course if you can/want to save a public IP address for this server only you could configure static NAT

  public static 10.0.5.200 (inside, outside) subnet mask 255.255.255.255

  That would bind essentially those 2 IP addresses, and you can allow services that are needed for the current server. Naturally, you will also need to allow traffic in the external ACL to the new public IP address.

  But it should also work with your configurations. If you want to use the IP address or a separate public IP's to you.

  If you are missing the 'road' to the 10.0.5.0/24 subnet in your PIX configuration so it is an obvious problem in why the server is inaccessible from the Internet. So, I would start by adding the "itinerary" necessary and retest. If it does not then would be good to verify that the routing between the server and the PIX is fine. For example, there is a route to the PIX server, and the server has a default route takes traffic to the PIX.

  Hope this helps

  -Jouni

• NAT does not work

  Hello

  NAT seems not to work on my pix.

  I checked my config n-times. No question :(

  Please is - can someone check my config and tell what is the problem? and thanks in advance.

  I have a modem DSL (Siemens) working as a default router (x.x.16.17)

  Here is the config (x and are the same everywhere in the script)

  6.2 (2) version PIX

  ethernet0 nameif outside security0

  nameif ethernet1 inside the security100

  activate 7PmXr29jODRJ.eaI encrypted password

  7PmXr29jODRJ.eaI encrypted passwd

  tita hostname

  domain any.net

  fixup protocol ftp 21

  fixup protocol http 80

  fixup protocol h323 h225 1720

  fixup protocol h323 ras 1718-1719

  fixup protocol they 389

  fixup protocol rsh 514

  fixup protocol rtsp 554

  fixup protocol smtp 25

  fixup protocol sqlnet 1521

  fixup protocol sip 5060

  fixup protocol 2000 skinny

  names of

  access-list inside_access_in allow icmp a whole

  inside_access_in ip access list allow a whole

  access-list outside_access_in allow icmp a whole

  interface ethernet0 10baset

  Auto interface ethernet1

  ICMP allow all outside

  ICMP allow any inside

  Outside 1500 MTU

  Within 1500 MTU

  IP address outside x.y.16.18 255.255.255.248

  IP address inside 192.168.22.2 255.255.255.0

  alarm action IP verification of information

  alarm action attack IP audit

  location of PDM 192.168.22.5 255.255.255.255 inside

  history of PDM activate

  ARP timeout 14400

  Global (outside) 10 x.y.16.19 - x.y.16.21 netmask 255.255.255.248

  NAT (inside) 10 0.0.0.0 0.0.0.0 0 0

  Access-group outside_access_in in interface outside

  inside_access_in access to the interface inside group

  Route outside 0.0.0.0 0.0.0.0 x.y.16.17 1

  Timeout xlate 03:00

  Timeout conn 01:00 half-closed 0: 10:00 udp 0:02:00 CPP 0: h323 from 10:00 0:05:00 sip 0:30:00 sip_media 0:02:00

  Timeout, uauth 0:05:00 absolute

  GANYMEDE + Protocol Ganymede + AAA-server

  RADIUS Protocol RADIUS AAA server

  AAA-server local LOCAL Protocol

  Enable http server

  http 192.168.22.5 255.255.255.255 inside

  No snmp server location

  No snmp Server contact

  SNMP-Server Community public

  No trap to activate snmp Server

  enable floodguard

  No sysopt route dnat

  Telnet 192.168.22.5 255.255.255.255 inside

  Telnet timeout 5

  SSH timeout 5

  username password of samir. Encrypted KnHwytEP2k92JAD privilege 15

  Terminal width 80

  Cryptochecksum:abd0f7a4e9339ff5026a3c5c9234cfa1

  Try just of Polo to the outside, using the interface:

  "global (outside) 10 interface.

  and get rid of your other global declarations (might have to remove the "nat (inside) 10 0.0.0.0 0.0.0.0 0 0 ' first or the pix could complain, I forgot).

  "I have a modem DSL (Siemens) working as a router by default (x.x.16.17)

  "Here is the config (x and are the same everywhere in the script)"

  Hereby you mean that the ADSL Modem is also a router? or is your ISP's router x.x.16.17 and they gets you a block of IP addresses? If this is the case, then the ISP router must know to get your addresses using NAT to the PIX.

  The trace of icmp shows that the PIX is originating and pings are extinguished as one of your NAT pool addresses, but he won't return. So I really think that your router upstream does not know to send packets to your NAT addresses to your PIX address. If PAT interface work, then that will be displayed exactly that, because the PIX knows to y to answer because it is addressed to him. But the NAT addresses are not directly on the PIX, they exist on this subject and the PIX knows what to do once she gets them, but they must be routed to it.

  -John