Comments on: GNS3 – Use Pemu as your Personal Firewall http://www.blindhog.net/gns3-use-pemu-as-your-personal-firewall/ Tips and Video Tutorials - Cisco .:. Linux .:. VOIP Mon, 08 Mar 2010 05:48:00 +0000 http://wordpress.org/?v=2.9 hourly 1 By: nash http://www.blindhog.net/gns3-use-pemu-as-your-personal-firewall/comment-page-1/#comment-32794 nash Fri, 30 Oct 2009 01:31:17 +0000 http://www.blindhog.net/gns3-use-pemu-as-your-personal-firewall/#comment-32794 Hi Josh, as like a lot of others i am having the same problem, i cannot connect to the default gateway which is my router's ip address. Hi Josh,

as like a lot of others i am having the same problem, i cannot connect to the default gateway which is my router’s ip address.

]]> By: john http://www.blindhog.net/gns3-use-pemu-as-your-personal-firewall/comment-page-1/#comment-32724 john Mon, 05 Oct 2009 18:36:02 +0000 http://www.blindhog.net/gns3-use-pemu-as-your-personal-firewall/#comment-32724 I have same problem as comment 2 and 12. I can't ping default gateway ?????? And the traffic is not passing through pix. Please help!!! I have same problem as comment 2 and 12. I can’t ping default gateway ?????? And the traffic is not passing through pix.

Please help!!!

]]> By: Peppi http://www.blindhog.net/gns3-use-pemu-as-your-personal-firewall/comment-page-1/#comment-32627 Peppi Thu, 03 Sep 2009 17:54:52 +0000 http://www.blindhog.net/gns3-use-pemu-as-your-personal-firewall/#comment-32627 Update ok stupid me, looks like when I changed the values in the ethernet cards (loopback and the real card) you need to reboot your machine. Hope this helps someone. Update ok stupid me, looks like when I changed the values in the ethernet cards (loopback and the real card) you need to reboot your machine. Hope this helps someone.

]]> By: Peppi http://www.blindhog.net/gns3-use-pemu-as-your-personal-firewall/comment-page-1/#comment-32626 Peppi Thu, 03 Sep 2009 16:20:13 +0000 http://www.blindhog.net/gns3-use-pemu-as-your-personal-firewall/#comment-32626 Hello, Having the same problem as the the people above. Using PIX 8.0(3) followed the instructions. I can ping internally but can't ping the internet. My external gateway is 192.168.1.1 and I set my internal network to 10.1.1.1 . Not sure If I have the setting correct :/. Any help would be appreciated. Here is what I typed into PIX: pixfirewall> en Password: pixfirewall# config t pixfirewall(config)# pixfirewall(config)# hostname peppi-pix peppi-pix(config)# peppi-pix(config)# domain-name peppi.net peppi-pix(config)# peppi-pix(config)# show run : Saved : PIX Version 8.0(3) ! hostname peppi-pix domain-name peppi.net enable password 8Ry2YjIyt7RRXU24 encrypted names ! interface Ethernet0 shutdown no nameif no security-level no ip address ! interface Ethernet1 shutdown no nameif no security-level no ip address ! interface Ethernet2 shutdown no nameif no security-level no ip address ! interface Ethernet3 shutdown no nameif no security-level no ip address ! interface Ethernet4 shutdown no nameif no security-level no ip address ! passwd 2KFQnbNIdI.2KYOU encrypted ftp mode passive dns server-group DefaultDNS domain-name peppi.net pager lines 24 icmp unreachable rate-limit 1 burst-size 1 no asdm history enable arp timeout 14400 timeout xlate 3:00:00 timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02 timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00 timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00 timeout uauth 0:05:00 absolute dynamic-access-policy-record DfltAccessPolicy no snmp-server location no snmp-server contact snmp-server enable traps snmp authentication linkup linkdown coldstart telnet timeout 5 ssh timeout 5 console timeout 0 threat-detection basic-threat threat-detection statistics access-list ! ! prompt hostname context Cryptochecksum:00000000000000000000000000000000 : end peppi-pix(config)# int e0 peppi-pix(config-if)# peppi-pix(config-if)# no shut peppi-pix(config-if)# peppi-pix(config-if)# nameif outside INFO: Security level for "outside" set to 0 by default. peppi-pix(config-if)# peppi-pix(config-if)# ip address 192.168.1.148 255.255.255.0 peppi-pix(config-if)# peppi-pix(config-if)# int e1 peppi-pix(config-if)# peppi-pix(config-if)# no shut peppi-pix(config-if)# peppi-pix(config-if)# nameif inside INFO: Security level for "inside" set to 100 by default. peppi-pix(config-if)# peppi-pix(config-if)# ip address 10.1.1.1 255.255.255.0 peppi-pix(config-if)# peppi-pix(config-if)# route outside 0.0.0.0 0.0.0.0 192.168.1.1 peppi-pix(config)# peppi-pix(config)# nat (inside) 1 10.1.1.0 255.255.255.0 peppi-pix(config)# peppi-pix(config)# global (outside) 1 interface INFO: outside interface address added to PAT pool peppi-pix(config)# peppi-pix(config)# wr mem Building configuration... Cryptochecksum: 1afbcdd2 6b9d18ee 7655cc19 154b01cb 1589 bytes copied in 5.770 secs (317 bytes/sec) [OK] peppi-pix(config)# peppi-pix(config)# ping 10.1.1.2 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.1.1.2, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 10/16/40 ms peppi-pix(config)# ping 192.168.1.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds: ????? Success rate is 0 percent (0/5) peppi-pix(config)# ping 192.168.1.148 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.1.148, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms peppi-pix(config)# ping 192.168.1.170 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.1.170, timeout is 2 seconds: ????? Success rate is 0 percent (0/5) peppi-pix(config)# ping 192.168.1.177 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.1.177, timeout is 2 seconds: ????? Thanks again. Hello,
Having the same problem as the the people above. Using PIX 8.0(3) followed the instructions. I can ping internally but can’t ping the internet. My external gateway is 192.168.1.1 and I set my internal network to 10.1.1.1 . Not sure If I have the setting correct :/. Any help would be appreciated. Here is what I typed into PIX:
pixfirewall> en
Password:
pixfirewall# config t
pixfirewall(config)#
pixfirewall(config)# hostname peppi-pix
peppi-pix(config)#
peppi-pix(config)# domain-name peppi.net
peppi-pix(config)#
peppi-pix(config)# show run
: Saved
:
PIX Version 8.0(3)
!
hostname peppi-pix
domain-name peppi.net
enable password 8Ry2YjIyt7RRXU24 encrypted
names
!
interface Ethernet0
shutdown
no nameif
no security-level
no ip address
!
interface Ethernet1
shutdown
no nameif
no security-level
no ip address
!
interface Ethernet2
shutdown
no nameif
no security-level
no ip address
!
interface Ethernet3
shutdown
no nameif
no security-level
no ip address
!
interface Ethernet4
shutdown
no nameif
no security-level
no ip address
!
passwd 2KFQnbNIdI.2KYOU encrypted
ftp mode passive
dns server-group DefaultDNS
domain-name peppi.net
pager lines 24
icmp unreachable rate-limit 1 burst-size 1
no asdm history enable
arp timeout 14400
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout uauth 0:05:00 absolute
dynamic-access-policy-record DfltAccessPolicy
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
telnet timeout 5
ssh timeout 5
console timeout 0
threat-detection basic-threat
threat-detection statistics access-list
!
!
prompt hostname context
Cryptochecksum:00000000000000000000000000000000
: end
peppi-pix(config)# int e0
peppi-pix(config-if)#
peppi-pix(config-if)# no shut
peppi-pix(config-if)#
peppi-pix(config-if)# nameif outside
INFO: Security level for “outside” set to 0 by default.
peppi-pix(config-if)#
peppi-pix(config-if)# ip address 192.168.1.148 255.255.255.0
peppi-pix(config-if)#
peppi-pix(config-if)# int e1
peppi-pix(config-if)#
peppi-pix(config-if)# no shut
peppi-pix(config-if)#
peppi-pix(config-if)# nameif inside
INFO: Security level for “inside” set to 100 by default.
peppi-pix(config-if)#
peppi-pix(config-if)# ip address 10.1.1.1 255.255.255.0
peppi-pix(config-if)#
peppi-pix(config-if)# route outside 0.0.0.0 0.0.0.0 192.168.1.1
peppi-pix(config)#
peppi-pix(config)# nat (inside) 1 10.1.1.0 255.255.255.0
peppi-pix(config)#
peppi-pix(config)# global (outside) 1 interface
INFO: outside interface address added to PAT pool
peppi-pix(config)#
peppi-pix(config)# wr mem
Building configuration…
Cryptochecksum: 1afbcdd2 6b9d18ee 7655cc19 154b01cb

1589 bytes copied in 5.770 secs (317 bytes/sec)
[OK]
peppi-pix(config)#
peppi-pix(config)# ping 10.1.1.2
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.1.1.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 10/16/40 ms
peppi-pix(config)# ping 192.168.1.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:
?????
Success rate is 0 percent (0/5)
peppi-pix(config)# ping 192.168.1.148
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.1.148, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms
peppi-pix(config)# ping 192.168.1.170
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.1.170, timeout is 2 seconds:
?????
Success rate is 0 percent (0/5)
peppi-pix(config)# ping 192.168.1.177
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.1.177, timeout is 2 seconds:
?????

Thanks again.

]]> By: Ateeq http://www.blindhog.net/gns3-use-pemu-as-your-personal-firewall/comment-page-1/#comment-30830 Ateeq Thu, 07 May 2009 15:59:36 +0000 http://www.blindhog.net/gns3-use-pemu-as-your-personal-firewall/#comment-30830 Hi, i am new for gns3, can some one help me regarding below issue. i am unalbe to delet pix link in gns3 getting "pemuwrapper does not support removal" error, please help me in this as i am new for gns3. Regards, AteeQ Hi,

i am new for gns3, can some one help me regarding below issue.

i am unalbe to delet pix link in gns3 getting “pemuwrapper does not support removal” error, please help me in this as i am new for gns3.

Regards,
AteeQ

]]> By: JohnHuang http://www.blindhog.net/gns3-use-pemu-as-your-personal-firewall/comment-page-1/#comment-28599 JohnHuang Thu, 02 Apr 2009 13:26:00 +0000 http://www.blindhog.net/gns3-use-pemu-as-your-personal-firewall/#comment-28599 PIX/ASA 7.X Issue: MSS Exceeded - HTTP Clients Cannot Browse to Some Web Sites http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a00804c8b9f.shtml PIX/ASA 7.X Issue: MSS Exceeded – HTTP Clients Cannot Browse to Some Web Sites

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a00804c8b9f.shtml

]]> By: JohnHuang http://www.blindhog.net/gns3-use-pemu-as-your-personal-firewall/comment-page-1/#comment-28596 JohnHuang Thu, 02 Apr 2009 13:17:49 +0000 http://www.blindhog.net/gns3-use-pemu-as-your-personal-firewall/#comment-28596 troubleshooting guide: 1. icmp no reply ==>windows firewall, default, no reply icmp packet for its NIC 2. issues command: pixfirewall # show asp drop Frame drop: Flow is denied by configured rule 63 First TCP packet not SYN 2 TCP data exceeded MSS 7668 Interface is down 2 ===> packets drop byTCP data exceeded MSS ===> search Google, find thishttp://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a00804c8b9f.shtml ===to MPF Configuration to Allow Packets that Exceed MSS troubleshooting guide:
1. icmp no reply ==>windows firewall, default, no reply icmp packet for its NIC
2. issues command:
pixfirewall # show asp drop
Frame drop:
Flow is denied by configured rule 63
First TCP packet not SYN 2
TCP data exceeded MSS 7668
Interface is down 2
===> packets drop byTCP data exceeded MSS
===> search Google, find thishttp://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a00804c8b9f.shtml
===to MPF Configuration to Allow Packets that Exceed MSS

]]> By: pixar http://www.blindhog.net/gns3-use-pemu-as-your-personal-firewall/comment-page-1/#comment-25216 pixar Sat, 07 Feb 2009 20:38:48 +0000 http://www.blindhog.net/gns3-use-pemu-as-your-personal-firewall/#comment-25216 Hi,I can ping inside and outside pix interfaces from my PC (10.1.1.1) but I can't ping my internet gateway(192.168.0.1) just like Colin in second post.This is my runing-config: PIX Version 8.0(3) ! hostname pixfirewall enable password 2KFQnbNIdI.2KYOU encrypted names ! interface Ethernet0 nameif outside security-level 0 ip address 192.168.0.10 255.255.255.0 ! interface Ethernet1 nameif inside security-level 100 ip address 10.1.1.5 255.255.255.0 ! passwd 2KFQnbNIdI.2KYOU encrypted ftp mode passive pager lines 24 logging enable logging timestamp logging asdm informational logging flash-bufferwrap mtu outside 1500 mtu inside 1500 icmp unreachable rate-limit 1 burst-size 1 icmp permit any outside icmp permit any inside asdm image flash:/asdm-603.bin no asdm history enable arp timeout 14400 global (outside) 1 interface nat (inside) 1 10.1.1.0 255.255.255.0 route outside 0.0.0.0 0.0.0.0 192.168.0.1 1 timeout xlate 3:00:00 timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02 timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00 timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00 timeout uauth 0:05:00 absolute dynamic-access-policy-record DfltAccessPolicy http server enable http 10.1.1.0 255.255.255.0 inside no snmp-server location no snmp-server contact snmp-server enable traps snmp authentication linkup linkdown coldstart telnet timeout 5 ssh timeout 5 console timeout 0 threat-detection basic-threat threat-detection statistics access-list username adam password ObtzdGKt8ALC6fhn encrypted privilege 15 ! class-map inspection_default ! ! policy-map global_policy class inspection_default inspect icmp ....and show route: Gateway of last resort is 192.168.0.1 to network 0.0.0.0 C 10.1.1.0 255.255.255.0 is directly connected, inside C 192.168.0.0 255.255.255.0 is directly connected, outside S* 0.0.0.0 0.0.0.0 [1/0] via 192.168.0.1, outside I Need help, thx pixar Hi,I can ping inside and outside pix interfaces from my PC (10.1.1.1) but I can’t ping my internet gateway(192.168.0.1) just like Colin in second post.This is my runing-config:

PIX Version 8.0(3)
!
hostname pixfirewall
enable password 2KFQnbNIdI.2KYOU encrypted
names
!
interface Ethernet0
nameif outside
security-level 0
ip address 192.168.0.10 255.255.255.0
!
interface Ethernet1
nameif inside
security-level 100
ip address 10.1.1.5 255.255.255.0

!
passwd 2KFQnbNIdI.2KYOU encrypted
ftp mode passive
pager lines 24
logging enable
logging timestamp
logging asdm informational
logging flash-bufferwrap
mtu outside 1500
mtu inside 1500
icmp unreachable rate-limit 1 burst-size 1
icmp permit any outside
icmp permit any inside
asdm image flash:/asdm-603.bin
no asdm history enable
arp timeout 14400
global (outside) 1 interface
nat (inside) 1 10.1.1.0 255.255.255.0
route outside 0.0.0.0 0.0.0.0 192.168.0.1 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout uauth 0:05:00 absolute
dynamic-access-policy-record DfltAccessPolicy
http server enable
http 10.1.1.0 255.255.255.0 inside
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
telnet timeout 5
ssh timeout 5
console timeout 0
threat-detection basic-threat
threat-detection statistics access-list
username adam password ObtzdGKt8ALC6fhn encrypted privilege 15
!
class-map inspection_default
!
!
policy-map global_policy
class inspection_default
inspect icmp

….and show route:
Gateway of last resort is 192.168.0.1 to network 0.0.0.0

C 10.1.1.0 255.255.255.0 is directly connected, inside
C 192.168.0.0 255.255.255.0 is directly connected, outside
S* 0.0.0.0 0.0.0.0 [1/0] via 192.168.0.1, outside

I Need help, thx

pixar

]]> By: Macadoo http://www.blindhog.net/gns3-use-pemu-as-your-personal-firewall/comment-page-1/#comment-25095 Macadoo Fri, 06 Feb 2009 18:35:30 +0000 http://www.blindhog.net/gns3-use-pemu-as-your-personal-firewall/#comment-25095 I have tried this also and can't get to the Internet. How does the PIX know how use the default gateway? How does the internet router talk to the PIX? I have tried this also and can’t get to the Internet. How does the PIX know how use the default gateway? How does the internet router talk to the PIX?

]]> By: Fred http://www.blindhog.net/gns3-use-pemu-as-your-personal-firewall/comment-page-1/#comment-24716 Fred Tue, 03 Feb 2009 17:47:50 +0000 http://www.blindhog.net/gns3-use-pemu-as-your-personal-firewall/#comment-24716 Hi, Someone have tested this with xp sp3, is it still working? I've tried on a French system but it doesn't work. I can't select the loopback from the cloud. Yes I added the lookback interface from the hardward wizard. Need help please, thx Fred Hi,

Someone have tested this with xp sp3, is it still working?

I’ve tried on a French system but it doesn’t work. I can’t select the loopback from the cloud. Yes I added the lookback interface from the hardward wizard.

Need help please, thx

Fred

]]>