One of the most popular firewall products for that small company market is the Cisco PIX 501.
balenciaga homme , Out of the box it requires just a couple configuration entries and you are up and running.
balenciaga tasche ,
Within this guide, we'll walk through the steps for configuring your completely new pix in the network edge.
This guide is written for the user that has no knowledge of the PIX firewall. As such, it is not a treatise on network security, but a quick, by-the numbers guide to configuring a PIX firewall with as little jargon as possible.
We're assuming that you have an web connection with at least one static Ip. While the PIX can easily handle a dynamic Ip (that's the default configuration), you won’t have the ability to easily configure remote access, VPNs, Mail, or web servers with no static IP address.
Your PIX must have provide an AC adapter, a yellow CAT 5 cable, an orange CAT5 cable along with a flat, (typically) light blue cable having a 9-pin serial connector on one end as well as an RJ-45 plug alternatively.
The yellow CAT5 cable is a standard Ethernet cable and it is used to connect your computer or server to the 4-port Ethernet switch built into the PIX. The Orange CAT5 cable is a cross-over cable and may be required to connect the exterior interface from the PIX to your ISP’s router (if your PC’s or workstations are connected to a Cisco switch within the network, you will also require a cross-over cable for connecting to one from the switch ports on the PIX).
What we are going to use for our configuration may be the baby blue rollover cable. Insert the serial jack into one of the serial ports on the back from the PC or laptop you'll be using to configure the PIX. Then, insert the RJ-45 plug in to the port on the back of the PIX labeled “console.”
Windows includes a built-in application which is used for (among other things) configuring serial devices. While using start menu, visit Start > Programs > Accessories > Communications > Hyper Terminal.
Choose the Hyper Terminal application. You may get a dialog box asking if you’d prefer to make Hyper Terminal your default telnet application. Unless you judgemental, go ahead and choose yes.
Then you will be requested the area code that you're dialing, although it isn’t applicable here, the program still wants to know, so fill it in and click on ‘next’ or ‘ok.’
You are able to call the connection anything you’d like; in this example we’ll use PIX. Click ‘ok’ to maneuver on.
Next, we’ll have to go into the details for the telephone number we’d prefer to dial. Since we aren't dialing a phone number, use the drop-down selector at the end of the box to choose COM1 or COM2 (whichever is applicable). For those who have no clue which is which, you may need to try it both ways.
Now, you'll be likely to tell the application some specifics concerning the port settings in order that it can effectively contact the PIX.
Luckily, it isn’t too complex, keep in mind 9600, 8, none, and 1. Enter these settings into the drop down selectors of the box on your screen.
Now we're prepared to setup the PIX. Insert the power cable and will also be greeted using the startup monologue (it’s not a dialog in this instance; it’s just informing you of what is occurring).
Then, you will be greeted having a screen that asks if you’d prefer to program the PIX using interactive prompts. For the purpose of this exercise, type no and click ‘enter’.
You will now obtain a prompt that appears such as this: pixfirewall> Type the word ‘enable’ (no quotes), when prompted for the password, simply click ‘enter’ because the default isn't any password.
The prompt has changed to some hash mark: Pixfirewall# Type the phrase ‘configure terminal’ (no quotes); you're telling the PIX that you want to go in the worldwide configuration mode and will also be doing all of your configuration through the terminal window.
Your prompt will now seem like this: pixfirewall(config)#
The very first thing we want to do is give your pix a number name. The PIX command syntax is: Variable name
Thus, to create the hostname we'll enter: pixfirewall(config)# hostname mypix
Now, the domain name; it’s alright if you don’t possess a domain set up in your network, you are able to refer to it as whatever you like. However, give some thought to whether a website may well be a possibility at some point and plan your naming scheme appropriately. pixfirewall(config)# domain-name mydomain.com
As you can see from the configuration above, the ethernet0 interface may be the outside interface, with a security setting of 0, while ethernet1 is the inside interface having a security setting of 100. Additionally, the interfaces are shutdown. All we want do to nuture them is enter the speed at which they should operate. Because they are Ethernet interfaces, any software version after 6.3(3) will require 100full, just before that, use 10full.
pixfirewall(config)# interface ethernet0 100full pixfirewall(config)# lnterface ethernet1 100full
Now to assign an address to the outside and inside interfaces; the ip address command sets the ip of an interface. The syntax is as follows: Ip
An example may be as follows: Ip outside pixfirewall(config)# ip address outside 12.25.241.2 255.255.255.252 (this IP address, netmask combination shouldn't be used, it is shown for example only. Use the IP address/mask given to you because of your ISP).
Then the inside Ip ip inside pixfirewall(config)# Ip address inside 192.168.0.1 255.255.255.0
A short word about IP addressing is in order here.
One of the ways that is used to save public IP addresses is through using non-routable IP addressing blocks specified by RFC 1597. You may sometimes hear them referred to as “private” IP addresses, that is fine, although not quite technically accurate. You will find three different blocks to select from: 10.0.0.0 – 10.255.255.255 having a netmask of 255.0.0.0 172.16.0.0 – 172.31.255.255 with a netmask of 255.255.0.0 192.168.0.0 – 192.168.255.255 having a netmask of 255.255.255.0
so long as your internal network's IP addresses are all within among those blocks of address space, you won't need to introduce the complexness of routing in your LAN. A good example scheme for those who are different is shown below: PIX – 192.168.0.1 netmask 255.255.255.0 File/DHCP server – 192.168.0.2 netmask 255.255.255.0 Workstations – 192.168.0.10 – 192.168.0.254 netmask (each) 255.255.255.0 * I intentionally skipped within the 192.168.0.3-9 addresses to plan for future expansion and the possible need for additional servers, it's not necessary to do that. * Configure your DHCP server at hand out addresses in the specified block making use of your ISP-provided DNS servers for name resolution. Make sure to change this will you ever decide to install a name server in your own network. * If you do not wish to setup a DHCP server, just configure each PC using the IP address, default gateway, netmask & DNS servers
It is crucial now to include a default route to the PIX configuration. Another term for default route may be the “default gateway.” You have to tell the PIX when it receives traffic destined for a network that isn’t directly connected, it will send it towards the connected ISP router. Your ISP must have given the Ip of the default gateway when you received your setup information.
This is actually the syntax: Route The English translation is “if packets destined for interface on the network specified by network address are bounded by mask then route it using a next hop in the optional command can be used to give an indication of distance.
For instance pixfirewall(config)# Route outside 0 0 1 (if packets are destined outside the network to the ip address with any netmask, send them with the ISPs default gateway, that is one hop away, meaning it is the device that the PIX is connected on the outside interface).
To password protect your PIX to be able to prevent unauthorized access, use something which is safe and hard to guess. Attempt to avoid the names of spouses, children, pets, birthdays or any other easily guessed variable. Whenever you can, use a mixture of letters and numbers. The syntax is as follows (but please don’t use cisco as the actual password) pixfirewall(config)# Passwd cisco (note the abbreviated spelling of the word password) this will set a password for basic access (rembember the pixfirewall> prompt?) pixfirewall(config)# Enable password cisco this will set the password for administrative access
Since your PIX has been given a basic configuration, you ought to be in a position to access the internet, while preventing unauthorized use of your resources.
Ron Jones may be the Founder and President of The Fulcrum Technology Group, Inc. www.fulcrumtechnologygroup.com Located just North of Atlanta, this consulting firm focuses on business technology solutions that will enable you to conserve a competitive advantage by increasing productivity, improving reliability and reducing expenses.
