Section 4.0: PIX Configuration
4.1. Basic PIX Configuration
As stated earlier, do not configure a default route on PIX. It should learn it from R3 via RIP. Make sure you are able to ping all parts of the network including behind PIX.
4.2. Network Address Translation (NAT)
Configure a static NAT on PIX for the syslog server behind PIX.
Configure outside access list to open TCP port 1468 for TCP-based reliable syslog server:
static (inside,outside) 10.50.31.65 192.168.6.65 netmask 255.255.255.255 0 0 access-list outside permit tcp any host 10.50.31.65 eq 1468 (hitcnt=0)
4.3. Advanced Configuration
The problem is that PIX is replying for ARP request for the server mentioned. This could be due to a global or alias configured for the same IP address. ...
Get CCIE Security Practice Labs now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
