Please ... I have some questions about the configuration of a 515 Pix :
1) What are commands to permit hosts on DMZ3 to access to DMZ2, Inside,
and Outside hosts ? Do i have to configure PAT ? (exemple : DMZ3 with
192.168.3.x/24 and .1 for the interface, DMZ2 with 192.168.2.x/24 and

I need help. I need recover log message from a Switch Cisco 4507r.
The standard way to make this (log 192.x.x.x) is not working.
In this case, the 4507r is enabled VRF Light capabilities.
Any idea?

Ok, so I've just about got this Cisco 1750 doing what I need it to do.
Today I found out that clients inside can't VPN out to an external
Microsoft VPN PPTP server.
I CAN VPN out while on a box that has a static mapped address, so its

I have tried everything from the default 'wizard' config (which
immediately breaks connectivity) to the most bare-bones CLI
configuration for CBAC, the results are always the same: as SOON as I
enable inspection, connectivity is lost.

I copied this statement from a Cisco training tutorial I just browsed.
The last sentence in the paragraph is not very clear to me.  Would one
of you PIX experts explain it in english please.
In software versions 5.2 and higher, for all inbound traffic, the PIX

On a spoke and hub network what are the pros and cons.
Network is running OSPF with a migration over to EIGRP.
Any and all responses is greatful.

is there any "plan" (flow diagram or something) how packets are
travelling through the PIX (7.x) and how certain decisions (NAT, Policy
etc.) are made? This would be very interesting, especially in
combination with VPN tunnels...

Hi Group,
We seem to having issues over a Site-To-Site VPN (PIX to CP-NG), this
really shows itself when users are trying to access remote  MS Exchange
Email, or large downloads.

Hiya,
I'm thinking of installing another NIC on our Cisco PIX 525. Currently
there are 3 Fast E interfaces on it, i.e. e0 e1 e2 . I plan to add
another one for a second DMZ. I've tried using a 3COM 10/100 NIC but

All,
I have been given an old 1602R and want to use it in our workare as a test
machine. My problem is I have no IOS for it. I tried downloading from Cisco
but was unable as I am not a preffered customer.

Hi everyone. I hope some of you could help with this headache problem
because I've really tried thousands of dhcp and interfaces configs
without success why does WinNT4 manage handle it and not the latest
linux kernel...

I am trying to create a lan-to-lan ipsec-isakmp vpn tunnel pix to pix
on end is dhcp.  I can't seem to bring up the tunnel not sure what is
wrong.  PPPOE is working and I got internet on the one end any
suggestions?  two configs posted below

I have a Cisco 2811 with AIM-VPN/EPII-PLUS module,  768M of memory, and
IOS c2800nm-advipservicesk9-mz.124-2.T.bin. Besides being a router for
the head office, It also serves as a VPN terminator for roaming users.
Currently the number of VPN connections is very low, no more than 10 ...

I tried to upgrade Finesse 7.0.1 to 7.0.2 using ROMmon environment.
I set up interface IP address, tftp server and filename, uploaded pix702.bin to flash:image. It rebooted and showed me
the newer version 7.0.2. When I reloaded the PIX and I did "sh ver" it told me 7.0.1!
It ...

Our head Office is using a Cisco Pix 515e Firewall behind a Cisco 827
DSL router, another remote office site is using a Cisco Pix 506
firewall behind a Cisco 827 DSL router. These are happily talking to
each other in a site to site VPN. We also have broadband and dial up