Cisco pix 515 workstations cant get outside pix can

Hi,

1. Please check whether the Tunnel Phase 1 and Phase 2 are Up.If Not Proceed Next, if Yes Proceed to point 4
2. Please check the peer IP is reachable
3. Please check the configuration and the encapsulation method used
4. Check whether in the Match Address whether the IP has been Allowed If Yes Proceed Next
5. The Branch PIX will be in the Outside interface of the Main PIX, security Level will be enabled so do NAT. If Yes Proceed next
6. If unable to ping enable the Inspect ICMP in the global policy to enable ping If Yes
7. If all The above are done. please check the routes between the 2 remote computer.

Please check all the above point, surely your problems will be solved

I might just want to suspect that the Cisco PIX 506 router has a defect and should be replaced for better performances.

Cheers.

The PIX is a layer 3 device, I cant say that I have ever tried to filter a mac address. I'm pretty sure you cant

Assuming you are running the latest version.
Short answer:
# access-list acl-outside line 1 deny ip IPYOUWANTTOBLOCK 255.255.255.255 any # write memory
The link below contains a longer helpful explanation: http://www.velocityreviews.com/forums/t35733-how-to-block-external-ip-address-on-pix-515e.html
I hope this helps.

Dear Kiran,

What is the name assigned for isp 1 as well as isp2.

for your reference kindly find the sample configuration......
ISP 1:
interface ethernet 0 100 full
nameif outside security-lvl 0
ip address outside 203.193.129.132 255.255.255.240.
nat (inisde) 1 (local network)
global (outside) 1 203.193.129.133
route outside 0 0 203.193.129.129.1.

regards,
mani.S

You can do this, For your ref i hv given you a link

http://channel9.msdn.com/forums/9GuyAroundTheWorld/251722-Cisco-Pix-to-Windows-Vista-Native-Client-Using-L2TP-IPSec/

No worries. Just give it a try then let us know should you get any problems or follow-up questions.

When you say HQ is that outside on the wan port trying to ping the Lan port?
Sometimes the router itself will respond to a ping but will not pass ping requests thru as the internal firewall can never be fully shutoff unless you are running your cisco switch as a DMZ 
also are you connecting your other pc's to the cisco or to the 5890.
Instead of shutting off the firewall completely try enabling bridge mode and give your cisco the outside IP addy.

Give each connection its own network & use Handshake authenication to access each other.You could also use a DMZ for 1(one) connection.
With this you will be able to use 1(one) External IP Address

This is for the pixes, I haven't upgraded an asa yet...should be close or the same

* find latest version of code, these are usually *.bin files located on http://www.cisco.com/cgi-bin/tablebuild.pl/pix
* confirm the flash and RAM requirements of the PIX OS software versus what the PIX has (”sho ver”)
* make sure you have a backup of the old PIX OS and PDM to the tftp server (or at least confirm the software is there)
Note: You cannot back them up from the PIX, so you will need to download them and put them on the tftp server * put in a change control form
* once change controls confirms date/time do the upgrade:
wri mem*** only if you save your configs via tftp wri net conf t ca save all copy tftp://your tftp server ip/pix635.bin flash:imageskip this if you don't use pdm copy tftp://your tftp server ip/pdm-304.bin flash:pdm *** if this is a failover pair, upgrade the other pair reboot