[c-nsp] PIX515 don't want to allocate ip address on interface.

Laurent Geyer lgeyer at 085zehn.com
Thu Aug 3 17:11:26 EDT 2006


On 8/3/06, Laurent Geyer <lgeyer at 085zehn.com> wrote:
>
> You're missing the default route.
>
> Try adding `route outside 0.0.0.0 0.0.0.0 <gateway IP>'.
>
> - Laurent
>


My bad, skipped right over the default route in your configuration.

With your current configuration the outside interface should at least
respond to ICMP echo requests, whether you have an access-group defined for
the outside interface or not. Start by verifying your outside interfaces
connectivity.

Also, for the purpose of managing the Pix via the outside interface you have
to define the hosts permitted to connect via SSH as follows:

`ssh <src network> <netmask> <interface>'


More information about the cisco-nsp mailing list