<DIV>Gerald,</DIV>
<DIV> </DIV>
<DIV>I don't have much knowledge about this PIX.</DIV>
<DIV>I got this box this weekend from ebay.</DIV>
<DIV> </DIV>
<DIV>so I am so excited about this stuff.</DIV>
<DIV>on the other hand, I am so stressed about this.</DIV>
<DIV>since I spent $350.00 for this.</DIV>
<DIV> </DIV>
<DIV>Don't assume that I know anything about PIX.</DIV>
<DIV>I'm just learning about this.</DIV>
<DIV>What does that mean?</DIV>
<DIV> </DIV>
<DIV>"allow inbound mail, web, DNS, FTP, and RADIUS connections, and bone just<BR>about everything else, including the PATed replies coming back in to .5? "</DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV>First, do I need to set up Server for authenticaion.</DIV>
<DIV>I assume that windows 2003 server will authenticate the network access since windows 2003 server has a user name and password, Right?</DIV>
<DIV> </DIV>
<DIV>If I need to set up server for authentication, what would that be?</DIV>
<DIV>any CD required?</DIV>
<DIV>while I was researching the web all day, I found that there was a comment</DIV>
<DIV>like "Installing CiscoSecure ACS for Windows 2000/NT"</DIV>
<DIV>Does it really need for creating VPN access from outside to inside network.</DIV>
<DIV> </DIV>
<DIV>All I want is that I would like to have access this server from outside using Cisco PIX 501 VPN.</DIV>
<DIV>If you add something, it would be really helpful.</DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV>Thanks!</DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV><BR><BR><B><I>Gerald Combs <gerald@ethereal.com></I></B> wrote:</DIV>
<BLOCKQUOTE class=replbq style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #1010ff 2px solid">Joseph Shepherd wrote:<BR><BR>> --> Router -> Cisco PIX 501 -> Windows 2003 Standard ( 192.168.1.3)<BR>> -> Windows XP (192.168.1.5)<BR>> Two computer is connected directly to PIX 501.<BR>> <BR>> only 192.168.1.3 can access to internet outside.<BR>> not 192.168.1.5.<BR><BR>I'm a little rusty on the PIX, but don't access lists have an implicit<BR>"deny" at the end? If so, wouldn't<BR><BR>> access-list outside_access_in permit tcp any host 67.53.24.194 eq smtp<BR>> access-list outside_access_in permit tcp any host 67.53.24.194 eq www<BR>> access-list outside_access_in permit tcp any host 67.53.24.194 eq domain<BR>> access-list outside_access_in permit tcp any host 67.53.24.194 eq ftp<BR>> access-list outside_access_in permit tcp any host 67.53.24.194 eq 1812<BR>> access-list outside_access_in permit tcp any host 67.53.24.194 eq
1813<BR>> access-list outside_access_in permit udp any any eq domain<BR>[ implied: deny ip any any ]<BR><BR>in conjunction with<BR><BR>> access-group outside_access_in in interface outside<BR><BR>allow inbound mail, web, DNS, FTP, and RADIUS connections, and bone just<BR>about everything else, including the PATed replies coming back in to .5?<BR>_______________________________________________<BR>Kclug mailing list<BR>Kclug@kclug.org<BR>http://kclug.org/mailman/listinfo/kclug<BR></BLOCKQUOTE><BR><BR><DIV>
<DIV>
<DIV>
<DIV>
<DIV>
<DIV><B><FONT size=2>
<P>Joseph Sheperd</B><BR><A href="mailto:ksjoecho@yahoo.com">ksjoecho@yahoo.com</A><BR></FONT><FONT face=Arial size=2><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: Arial; mso-fareast-font-family: 'Times New Roman'; mso-ansi-language: EN-US; mso-fareast-language: EN-US; mso-bidi-language: AR-SA">I like the dreams of the future better than the history of the past.<SPAN style="mso-spacerun: yes"> <BR></SPAN>--Thomas Jefferson</SPAN></FONT></P></DIV></DIV></DIV></DIV></DIV></DIV><p>
<hr size=1>Do you Yahoo!?<br>
<a href="http://us.rd.yahoo.com/mail_us/taglines/security/*http://promotions.yahoo.com/new_mail/static/protection.html">Yahoo! Mail</a> - You care about security. So do we.