Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have bought PIX 501 router for my home network (2 laptops and broadband cable modem).

I am trying to configure it. I am able to connect to PIX via console and Hyperterminal. I used initial setup procedure.

But I cannot connect to PIX from the laptop via Ethernet. "Inside" interface IP address is,

I attach port 1 of PIX firewall to the laptop by the ethernet cable which is not a crossover. I try to ping from the laptop but it fails. It fails if IP address is obtained automatically. It also fails if I assign static IP address to the laptop (

I'd like to connect to PIX using web interface ( but it fails.

Is anything missing in the configuration?

Current configuration is below.

PIX Version 6.3(3)                  
interface ethernet0 auto shutdown                                 
interface ethernet1 100full                           
nameif ethernet0 outside security0                                  
nameif ethernet1 inside security100                                   
enable password laYDkT.MQTk8cQfX encrypted                                          
passwd 2KFQnbNIdI.2KYOU encrypted                                 
hostname pixfirewall                    
domain-name MSHOME1                   
fixup protocol dns maximum-length 512                                     
fixup protocol ftp 21                     
fixup protocol h323 h225 1720                             
fixup protocol h323 ras 1718-1719                                 
fixup protocol http 80                      
fixup protocol rsh 514                      
fixup protocol rtsp 554                       
fixup protocol sip 506                    
fixup protocol sip udp 5060                           
fixup protocol skinny 2000                          
fixup protocol smtp 25                      
fixup protocol sqlnet 1521                          
fixup protocol tftp 69                      
pager lines 24              
mtu outside 1500                
mtu inside 1500               
no ip address outside                     
ip address inside                                        
ip audit info action alarm                          
ip audit attack action alarm                            
pdm history enable                  
arp timeout 14400                 
timeout xlate 3:00:00                     
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h225 1:00:00                                                

timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:00                 

timeout uauth 0:05:00 absolute

aaa-server TACACS+ protocol tacacs+

aaa-server RADIUS protocol radius

aaa-server LOCAL protocol local

http server enable

http inside

http inside

http inside

http inside

http inside

http inside

no snmp-server location

no snmp-server contact
snmp-server community public

no snmp-server enable traps

floodguard enable

telnet timeout 5

ssh timeout 5

console timeout 0

terminal width 80


: end

share|improve this question
What? You bought a what for your home network? OMG. I know they are old beasts, but you, sir, my namesake, you have to most serious case of overkill-itis I have ever witnessed. I tip my hat to you. Seriously though, if this fails to work, what are you going to do? Replace it with a Check Point Power-1 11075 ;-) – wzzrd Jan 11 '11 at 12:31

This is a home network, so not ServerFault related.

Anyways, try from your laptop.

share|improve this answer
I think the fact that it's 'enterprise' hardware normally dealt with by a sys/network admin probably makes it a serverfault question. – Cian Sep 9 '10 at 11:19

Check the subnet mask you're giving to the inside interface. In the config above, you list

Which gives an address range of to If you're giving your laptop an address of, that's outside the range.

Try either giving your laptop (or something else on the 10.1.1 network) or changing the netmask on the router interface to

share|improve this answer

Use the serial cable and reset it. Will pop up a config menu after for the initial setup in the console.

Do that after; telnet inside

For the web page configuration forget that, you miss the pdm config, and most of all you must use Java 1.6.0_1 (the max version you can go)

Second point, you have no NAT rule at all..

Would be a rule like that, and I surelly miss some access-list command

static (inside,outside) WAN_IP netmask

nat (inside) 1

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.