Re: [c-nsp] PIX question

2009-01-10 Thread Michael K. Smith
On 1/9/09 4:37 PM, chloe K chloekcy2...@yahoo.ca wrote: Yes. you are right it works now. https works fine But I can't logon in http as user pix and pw Do I need to do anything? snmp works fine. But I can't get CPU info in cacti? It only shows the interface.

[c-nsp] PIX question

2009-01-09 Thread chloe K
Hi all I enable the http and snmp community in dmz 192 network http server enable http 192.168.0.0 255.255.255.0 dmz snmp-server community aaa but I can't access both (httpd and snmpwalk) in any hosts of 192.168.0.0 network What am I doing wrong? Thank you

Re: [c-nsp] PIX question

2009-01-09 Thread Brad Hedlund
On 1/9/09 1:05 PM, chloe K chloekcy2...@yahoo.ca wrote: Hi all I enable the http and snmp community in dmz 192 network http server enable http 192.168.0.0 255.255.255.0 dmz snmp-server community aaa but I can't access both (httpd and snmpwalk) in any hosts of

Re: [c-nsp] PIX question

2009-01-09 Thread Ge Moua
Could be a routing issue on the pix; do you get any syslog msgs about no route . . . ; traffic could be coming in on the dmz interface but leaving out the default route to say like the outside interface. If this is indeed the case then create a route statement: route your_ip_addr

Re: [c-nsp] PIX question

2009-01-09 Thread chloe K
Thank you for your doc info You mean I have to put access-list before http and snmp can work access-list ANY extended permit ip any any access-group ANY in interface dmz ls it OK? One question, Why the telnet and ssh are working now? Thank you again Brad Hedlund

Re: [c-nsp] PIX question

2009-01-09 Thread chloe K
Thank you for your doc info You mean I have to put access-list before http and snmp can work access-list ANY extended permit ip any any access-group ANY in interface dmz ls it OK? One question, Why the telnet and ssh are working? Thank you again

Re: [c-nsp] PIX question

2009-01-09 Thread Brad Hedlund
On 1/9/09 2:41 PM, chloe K chloekcy2...@yahoo.ca wrote: One question, Why the telnet and ssh are working? You mean I have to put access-list before http and snmp can work OK. I may have misunderstood your original question. It now sounds like you are trying to enable management of the

Re: [c-nsp] PIX question

2009-01-09 Thread chloe K
Yes. you are right it works now. https works fine But I can't logon in http as user pix and pw Do I need to do anything? snmp works fine. But I can't get CPU info in cacti? It only shows the interface. Do you have any idea? Thank you again Brad Hedlund

Re: [c-nsp] pix question

2008-02-07 Thread Justin Shore
Raman Sud wrote: Show version will do the trick as well! Don't forget to prepend 88 to the output of the sh ver serial number. Ie, if sh ver says it's 81234567 then the actual SN is 8881234567. I went through that yesterday trying to figure out the SN of a 515E we're putting on a

Re: [c-nsp] pix question

2008-02-07 Thread Ziv Leyes
Subject: Re: [c-nsp] pix question Can you be a little more clear on what I can't do that means? Can you not login to the standby? Can you not run a show ver on the standby? Is your failover working? What does show failover show when you run that on the active PIX? On 6-Feb-08, at 11:05 AM

Re: [c-nsp] pix question

2008-02-06 Thread ultramajestic
For some reason, I can't do that, it is strange :-/ El mié, 06-02-2008 a las 08:25 -0500, Jason Lixfeld escribió: You can just log in to it (the passive/standby node) directly and do a show ver. On 6-Feb-08, at 8:15 AM, ultramajestic wrote: Hi, is there anyway to see the serial number

Re: [c-nsp] pix question

2008-02-06 Thread Jason Lixfeld
Can you be a little more clear on what I can't do that means? Can you not login to the standby? Can you not run a show ver on the standby? Is your failover working? What does show failover show when you run that on the active PIX? On 6-Feb-08, at 11:05 AM, ultramajestic wrote: For