Google Answers Logo
View Question
 
Q: Cisco Pix Setup for 2 colo servers ( No Answer,   1 Comment )
Question  
Subject: Cisco Pix Setup for 2 colo servers
Category: Computers > Security
Asked by: jonhalton-ga
List Price: $100.00
Posted: 25 Aug 2004 04:58 PDT
Expires: 25 Aug 2004 08:14 PDT
Question ID: 392312
I currently have two servers in a datacentre (one Linux and one
Windows, another three servers will be added shortly, they are all
running as webservers). I have a block of 64 IP addresses which are on
the same Subnet. Each server has its own static IP address so that I
can connect to each server remotely and each server most show its IP
address when contacting outside the network (so no NAT).  The servers
are currently protected by a Watchguard Firebox II firewall which was
very simple to set up. I simply plugged the Internet connection cable
to the External Interface, a Cisco Switch to the Internal Interface,
entered a single IP address, the default gateway and the subnet mask
for the Firebox and set up my rules (to allow http, https, ssh etc..).

I am replacing the Firebox with a Cisco Pix 515e firewall which is
obviously more difficult to configure. What I am looking for is a
basic guide to configuring the Pix to work in the same way as the
Firebox (I plan to use the PDM web based interface).

There are two interfaces, internal and external and I am confused
about how I configure these (I was only asked for one IP address with
the Firebox). I need to ensure that the servers use their assigned
static IP's so do not want the Pix to assign IP addresses to the
servers etc. If you can provide a step by step guide to this type of
configuration it would be very helpful.

All of the sample configs that I can find seem to be based on having
an internal network rather than all remotely accessed webservers.
Incidentaly I also plan to administer the Firewall remotely  using the
PDM interface.
Answer  
There is no answer at this time.

Comments  
Subject: Re: Cisco Pix Setup for 2 colo servers
From: koldo-ga on 25 Aug 2004 05:13 PDT
 
As far as i know a hardware Firewall should always have at least two
interfaces, one IP address for each.

About the config, i recommend doing NAT, in your case maybe static NAT
for each server. If your servers have each one of them a public IP
address, they would have, with NAT, a private IP address, and the
public IP addresses would all be "assigned" to the outside interface
of the PIX. The PIX would hide the private IP and show the public one,
knowing which private IP refers to the public IP.

Hope this helps

Important Disclaimer: Answers and comments provided on Google Answers are general information, and are not intended to substitute for informed professional medical, psychiatric, psychological, tax, legal, investment, accounting, or other professional advice. Google does not endorse, and expressly disclaims liability for any product, manufacturer, distributor, service or service provider mentioned or any opinion expressed in answers or comments. Please read carefully the Google Answers Terms of Service.

If you feel that you have found inappropriate content, please let us know by emailing us at answers-support@google.com with the question ID listed above. Thank you.
Search Google Answers for
Google Answers  


Google Home - Answers FAQ - Terms of Service - Privacy Policy