PIX V7 DHCP
in [Cisco]
|
Prev: I AM SELLING NORTEL NTHW08CG - I have 12 new in original packaging - $4,000 each or best offer.
Next: 100% pass without exam CISCO, CCNA, CCNP, CCIE Certification bycertxpert.com
From: Ned on 5 May 2010 06:48 On 5 May, 10:13, bod43 <Bo...(a)hotmail.co.uk> wrote: > On 5 May, 09:48, Bjarke Andersen <bjarke.ander...(a)gmail.com> wrote: > > > Ned <terrydrocon...(a)gmail.com> crashed Echelon writing news:c19664a5-5b47- > > 41a2-8166-a8853520e...(a)q30g2000yqd.googlegroups.com: > > > > Can anyone advise whats wrong with this PIUX config - I want to get > > > FW(config-if)# ip address 192.168.1.254 255.255.255.0 > > > FW(config-if)# dhcpd address 192.168.1.100-192.168.1.200 inside > > > Interface inside ip address or netmask not valid > > > (0.0.0.0/255.255.255.0) > > > FW(config)# > > > Missing statement of IP address is for inside interface? > > > ip address inside 192.168.1.254 255.255.255.0 > > I don't do much pix but config looks reasonable in > principle. > > http://www.cisco.com/en/US/docs/security/pix/pix61/command/reference/... > (I see it's the wrong version but you do the legwork:) > > "The size of the pool is limited to 32 addresses > for the PIX 506 platform and 256 addresses for > other platforms." > > Don't suppose you have a pix 506 do you? PIX is a PIX-515E FW# show ip System IP Addresses: Interface Name IP address Subnet mask Method Ethernet0 outside 89.191.49.5 255.255.255.224 manual Ethernet1 inside 192.168.1.254 255.255.255.0 manual Current IP Addresses: Interface Name IP address Subnet mask Method FW# conf t FW(config)# dhcpd address 192.168.1.100-192.168.1.200 inside Interface inside ip address or netmask not valid (0.0.0.0/255.255.255.0) FW(config)# exit
From: Bjarke Andersen on 5 May 2010 07:40 Ned <terrydroconnor(a)gmail.com> crashed Echelon writing news:9e940980-e491- 42ee-b1f0-2d435448eaa4(a)e2g2000yqn.googlegroups.com: > FW# conf t > FW(config)# dhcpd address 192.168.1.100-192.168.1.200 inside > Interface inside ip address or netmask not valid > (0.0.0.0/255.255.255.0) > FW(config)# exit > FM-FW# > Though I dont do much work in Cisco anymore the please note the Cisco examples of a PIX dhcp config: Example 5-2 DHCP Server Configuration ! set the ip address of the inside interface ip address inside 10.0.1.2 255.255.255.0 ! configure the network parameters the client will use once in the ! corporate network and dhcpd address 10.0.1.101-10.0.1.110 dhcpd dns 209.165.201.2 209.165.202.129 dhcpd wins 209.165.201.5 dhcpd lease 3000 dhcpd domain example.com ! enable dhcp server daemon on the inside interface dhcpd enable inside Especially not how Cisco sets the inside ip address with a specific command say "ip address INSIDE x.x.x.x y.y.y.y" In your config you have named the interface and the added the IP. Could this be the reason for your error message? -- Bjarke Andersen
From: Ned on 5 May 2010 09:18 On 5 May, 12:40, Bjarke Andersen <bjarke.ander...(a)gmail.com> wrote: > Ned <terrydrocon...(a)gmail.com> crashed Echelon writing news:9e940980-e491- > 42ee-b1f0-2d435448e...(a)e2g2000yqn.googlegroups.com: > > > FW# conf t > > FW(config)# dhcpd address 192.168.1.100-192.168.1.200 inside > > Interface inside ip address or netmask not valid > > (0.0.0.0/255.255.255.0) > > FW(config)# exit > > FM-FW# > > Though I dont do much work in Cisco anymore the please note the Cisco > examples of a PIX dhcp config: > > Example 5-2 DHCP Server Configuration > > ! set the ip address of the inside interface > ip address inside 10.0.1.2 255.255.255.0 > ! configure the network parameters the client will use once in the > ! corporate network and > dhcpd address 10.0.1.101-10.0.1.110 > dhcpd dns 209.165.201.2 209.165.202.129 > dhcpd wins 209.165.201.5 > dhcpd lease 3000 > dhcpd domain example.com > ! enable dhcp server daemon on the inside interface > dhcpd enable inside > > Especially not how Cisco sets the inside ip address with a specific command > say "ip address INSIDE x.x.x.x y.y.y.y" > > In your config you have named the interface and the added the IP. > > Could this be the reason for your error message? > > -- > Bjarke Andersen No, I don't think that is the problem; what you are looking at is a version prior to version 7. In V7 the syntax used for configuring the interface is: ! interface Ethernet1 nameif inside security-level 100 ip address 192.168.1.254 255.255.255.0 !
From: Lutz Donnerhacke on 6 May 2010 08:16
* Ned wrote: > On 5 May, 11:01, Lutz Donnerhacke <l...(a)iks-jena.de> wrote: >> Please change the IP address first and verify the correctness of the >> configuration by "show ip". > > FW# show ip > System IP Addresses: > Interface Name IP address Subnet > mask > Method > Ethernet0 outside 89.191.49.5 > 255.255.255.224 > manual > Ethernet1 inside 192.168.1.254 > 255.255.255.0 > manual > Current IP Addresses: > Interface Name IP address Subnet > mask > Method Your system does not have this IP addresses in use. Are you running a failover system? "show version" |