Welcome to Scribd, the world's digital library. Read, publish, and share books and documents. See more
Download
Standard view
Full view
of .
Look up keyword
Like this
15Activity
0 of .
Results for:
No results containing your search query
P. 1
PIX Configuration With PDM

PIX Configuration With PDM

Ratings:

5.0

(3)
|Views: 5,669|Likes:
Published by Indrajit Banerjee
PIX Configuration with PDM
PIX Configuration with PDM

More info:

Published by: Indrajit Banerjee on Aug 09, 2008
Copyright:Attribution Non-commercial

Availability:

Read on Scribd mobile: iPhone, iPad and Android.
download as DOC, PDF, TXT or read online from Scribd
See more
See less

02/14/2011

pdf

text

original

 
http://networksecurity.weebly.com/
Cisco’s PIX firewall is one of the more common hardware devices used to protect small-to medium-size networks from outside attacks. Correctly configured PIX also helps youmaintain some level of control over resources that internal users can access. In thisarticle, we’ll walk through the steps to get a PIX firewall up and running in a usefulconfiguration.We’ll be using the relatively lightweightPIX 501for our example setup. The PIX 501includes a console port, a WAN port, four 10/100 Ethernet ports, and it supports up to 10internal IP addresses as well as optional DES encryption. We’ll be installing under PIXmanagement software version 6.2(1). Your configuration steps may differ slightly fromthe ones presented in this article if you’re using a different version of the software.
Getting started
First of all, physically install your PIX where you’ll be able to connect it to both thenetwork and directly to a Windows-based PC via a serial cable. The new PIX operatingsystem includes two methods of management, either from the command line or the PixDevice Manager (PDM), a Web-based GUI that can handle almost the entireconfiguration process. Of course, you’ll have to use the command line to set up an IPaddress for the PIX before you actually are able to use the PDM.
The default IP address
The PIX 501 assigns an address of 192.168.1.1 to the PIX to be accessed from theinternal network. In the likely case that we are willing to accept this default, we couldskip the command line setup on this particular unit. We’ll walk through the IP assignment process here to give a more thorough overview of the configuration steps for other PIXmodels.To begin the configuration process, you must connect your administrative PC to the PIXvia HyperTerminal. Simply link the PIX’s console port to the PC via the serial cable. InHyperTerminal, set the baud rate to 9600. Once connected, the PIX ask you to do some basic configuration via a number of prompts at the command line.
The command line setup processListing A
provides a transcript of our sample setup routine for our PIX 501. The items in bold are our responses to the prompts. We’ve also included a few notes about some of thequestions.Listing A
Pre-configure PIX Firewall now through interactive prompts [yes]?
yes
 
Enable password [<use current password>]:
admin123
 Note: The password that will be used to make configuration changes to the PIX.
Clock (UTC):Year [2008]:
2008
Month [Aug]:
 Aug
Day [8]:
7
Time [11:15:30]:
11:15:00
 Note: Set the date and time on the PIX.
Inside IP address:
192.168.1.20
 Note: The IP address (on the local network) that will be used on the LAN side of the PIX,as well as the default gateway for the devices on the network.
Inside network mask:
255.255.255.0
Note: The subnet mask that goes along with your internal IP address
Host name:
 Mypix
 Note: Assigns a name to your firewall. You’ll see this question every time you use thecommand line.
Domain name:
 myowndomain.com 
 Note: This is your domain name. Configuring this will expedite the routing of internal packets.
IP address of host running PIX Device Manager:
192.168.1.102
 Note: Restricts what devices are allowed to configure the PIX via the GUI
The following configuration will be used:Enable password: admin123Clock (UTC): 11:15:00 Aug 7 2008Inside IP address: 192.168.1.20Inside network mask: 255.255.255.0Host name: MypixDomain name: myowndomain.comIP address of host running PIX Device Manager: 192.168.1.102Use this configuration and write to flash?
yes
Building configuration...Cryptochecksum: 988d9391 701b1c05 1175826a 1278dea5[OK]End of Listing A
---------------------------------------------------------------------------------------------------------
Getting current
If you have a new PIX, you should check the version of the management softwareinstalled on it using the
version
command at the command prompt. To do an upgrade,you’ll need to download the newest images from theCisco support Web site. You’ll needa support contract on your firewall to successfully download the upgrade. It is alwaysrecommended support contracts on single points of failure in a network; the contractsaren’t terribly expensive considering how much they can end up saving you. If you do not
 
have a support contract, you’ll have to register your product and purchase a contract ontheCustomer Registrationpage.As of this writing, the most current PIX software image available is 6.2.1 / 6.3.x (loginrequired) and the PIX Device Manager is in version 2.0.1 / PDM v3.0(2) (login required).Going to the new PDM is critical if you want to use VPNs because version 1.x does notsupport their configuration. The files are named
 pix621.bin
and
 pdm-201.bin
,respectively.
The PIX software
Installing the newest version of the PIX software is as easy as following these steps:1.1. Save the PIX files into a directory accessible by your TFTP server. If youneed a TFTP server, Cisco provides one for free.2.2. Connect via HyperTerminal to make sure the serial link is still working.3.3. Reboot the PIX by either power cycling it or issuing a reboot command atthe command line.4.4. When a message appears indicating that the configuration is about to loadfrom flash, press [Esc] to put the PIX into monitor mode.5.5. Provide the PIX with some information about its addressing and where itcan find your TFTP server, as well as the name of the binary to install. We enteredthe information in
Table A
for our set up.Table AValue Purposeaddress 192.168.1.20 Internal address of the PIX.server 192.168.1.2 IP address of my TFTP server.file pix621.bin Name of the file to download.tftp Starts the TFTP transfer of the new image.When the install routine is complete, elect to save this image to flash. The unit will rebootwith the new PIX software loaded.
Updating the PDM software
My PIX 501 came with version 1.x of the PDM, which is out-of-date. To upgrade it, Iused the
copy tftp://192.168.1.2/pdm-201.bin flash:pdm
command at the PIX prompt toupdate the GUI tool.
Move to the GUI
Once you’ve completed the basic configuration, you’ll be able to use the PDM tocomplete the installation. From the workstation with the IP address that you provided inthe command-line configuration, you can browse to your PIX using HTTPS. For myinstallation, I will browse to
https://192.168.1.20
. The PDM works with any browser that

Activity (15)

You've already reviewed this. Edit your review.
1 thousand reads
1 hundred reads
HLAFE liked this
HLAFE liked this
bwhammond liked this
thagyi liked this
meeedo liked this
aaaanand liked this

You're Reading a Free Preview

Download
scribd
/*********** DO NOT ALTER ANYTHING BELOW THIS LINE ! ************/ var s_code=s.t();if(s_code)document.write(s_code)//-->