fir3net
PPS-Firenetbanner-780.5x190-30-03-17

Cisco PIX - Routing

Static

To send all traffic to 192.168.0.1 out the outside interface.
To send any traffic in 10.0.1.0/24 to 10.0.0.1 out the inside interface

(config)#Route outside 0 0 192.168.0.1
(config)#Route inside 10.0.1.0 255.255.255.0 10.0.0.1

RIP

Allow RIP updates to be received on the outside interface with a key of cisco and id of 2.
Pass RIP updates out the inside interface

(config)#rip outside passive version 2 authentication md5 cisco 2
(config)#rip inside default

Allow RIP v2 passive on the the outside and dmz interface and Allow RIP v1 passive on the inside

(config)#rip outside passive version 2 authentication md5 cisco 2
(config)#rip inside passive
(config)#rip dmz passive version 2

OSPF

To configure OSPF with the standard 3 interfaces (inside,outside,DMZ)

(config)#router ospf 1
(config-router)#network 1.1.1.0 255.255.255.0 area 0
(config-router)network 172.16.0.0 255.255.0.0 area 172.16.0.0
(config-router)network 10.0.0.0 255.255.255.0 area 10.0.0.0

To filter LSA3 advertisements out from area 0 so that the internal network is denied but the DMZ is allowed.

(config-router)area 0 filter-list prefix testlist
(config)#prefix-list testlist deny 10.0.0.0/16
(config)#perfix-list testlist permit 172.16.0.0/16

About the Author

RDonato

R Donato

Rick Donato is the Founder and Chief Editor of Fir3net.com. He currently works as a Principal Network Security Engineer and has a keen interest in automation and the cloud.

You can find Rick on Twitter @f3lix001