location server sip
How to set up basic NAT internet access on a Cisco PIX 7.2(2).?
I'm trying to setup basic internet access for a Cisco Pix - newb..
I think I need an access list to allow access for inside to outside? Can someone add to what I have? Thanks. :)
There are 5 statics, outside= security 100, in= security 0 - I put Xs to cover the address - the mask is /29 (248).
global (outside) 1 interface
nat (inside) 1 0.0.0.0 0.0.0.0
route outside 0.0.0.0 0.0.0.0 24.X.X.X 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout uauth 0:05:00 absolute
username superman password xxxxxxxxxxxx encrypted privilege 15
http server enable
http 192.168.1.2 255.255.255.255 inside
no snmp-server location
no snmp-server contact
Thanks!
The PIX should, with a default config, allow traffic from a lower security level (in) to a higher security level interface (out).
The access list you would need would be to allow the desired traffic back in. Its been a while...something like.. and the syntax is probably wrong... but, the concept of..
access-list inbound permit tcp any host 192.168.1.x eq www
since you have http server enabled I am guessing that you are using the gui with SDM to configure it? there is probably a point-and-click way of enabling it though that
[phpzon]location server sip, 5, Electronics[/phpzon]
[phpbay]location server sip, 30, "11211"[/phpbay]
013 Integration with External SIP server eng
