Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have bought PIX 501 router for my home network (2 laptops and broadband cable modem).

I am trying to configure it. I am able to connect to PIX via console and Hyperterminal. I used initial setup procedure.

But I cannot connect to PIX from the laptop via Ethernet. "Inside" interface IP address is,

I attach port 1 of PIX firewall to the laptop by the ethernet cable which is not a crossover. I try to ping from the laptop but it fails. It fails if IP address is obtained automatically. It also fails if I assign static IP address to the laptop (

I'd like to connect to PIX using web interface ( but it fails.

Could you please help me? Is anything missing in the configuration?

Current configuration is below.

PIX Version 6.3(3)
interface ethernet0 auto shutdown
interface ethernet1 100full
nameif ethernet0 outside security0
nameif ethernet1 inside security100
enable password laYDkT.MQTk8cQfX encrypted
passwd 2KFQnbNIdI.2KYOU encrypted
hostname pixfirewall
domain-name MSHOME1
fixup protocol dns maximum-length 512
fixup protocol ftp 21
fixup protocol h323 h225 1720
fixup protocol h323 ras 1718-1719
fixup protocol http 80
fixup protocol rsh 514
fixup protocol rtsp 554
fixup protocol sip 506
fixup protocol sip udp 5060
fixup protocol skinny 2000
fixup protocol smtp 25
fixup protocol sqlnet 1521
fixup protocol tftp 69
pager lines 24
mtu outside 1500
mtu inside 1500
no ip address outside
ip address inside
ip audit info action alarm
ip audit attack action alarm
pdm history enable
arp timeout 14400
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h225 1:00:00

timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:00

timeout uauth 0:05:00 absolute

aaa-server TACACS+ protocol tacacs+

aaa-server RADIUS protocol radius

aaa-server LOCAL protocol local

http server enable

http inside

http inside

http inside

http inside

http inside

http inside

no snmp-server location

no snmp-server contact snmp-server community public

no snmp-server enable traps

floodguard enable

telnet timeout 5

ssh timeout 5

console timeout 0

terminal width 80


: end


Many thanks


share|improve this question
What? You bought a what for your home network? OMG. I know they are old beasts, but you, sir, my namesake, you have to most serious case of overkill-itis I have ever witnessed. I tip my hat to you. Seriously though, if this fails to work, what are you going to do? Replace it with a Check Point Power-1 11075 ;-) –  wzzrd Jan 11 '11 at 12:31

2 Answers 2

This is a home network, so not ServerFault related.

Anyways, try from your laptop.

share|improve this answer
I think the fact that it's 'enterprise' hardware normally dealt with by a sys/network admin probably makes it a serverfault question. –  Cian Sep 9 '10 at 11:19

Check the subnet mask you're giving to the inside interface. In the config above, you list

Which gives an address range of to If you're giving your laptop an address of, that's outside the range.

Try either giving your laptop (or something else on the 10.1.1 network) or changing the netmask on the router interface to

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.