Using the Startup Wizard
PDM includes wizards to abetment firewall administrators in the antecedent bureaucracy and
ongoing aliment of the PIX firewall. One of these wizards, the Startup
Wizard, guides you through archetypal bureaucracy agreement prompts such as interface
settings, passwords, auto-update information, and others.The Startup Astrologer is an
excellent apparatus to use initially and for approved agreement changes; it extracts the
current agreement and provides these PIX attributes to the administrator
automatically.Therefore, the Startup Astrologer action will not overwrite the
current PIX firewall configuration.
www.syngress.com
Figure 9.7 Our Example Network Architecture
Internet
www.securecorp.com
Internal Desktop
Clients
mail.securecorp.com
External Address: 192.10.10.2
Internal Address: 172.20.1.1
Internal Address: 172.20.1.25
Internal Address: 172.20.1.80
Internal Addresses:
172.20.2.254
Internal Address: 192.10.10.1
Location: Washington, DC
pix1.securecorp.com
rtr1.securecorp.com
Internal Address: 134.20.20.1
Location: Prague
rtr2.securecorp.com
External Address: 134.20.20.2
Internal Address: 172.16.1.1
pix2.securecorp.com
External Remote
VPN Clients
Internal Desktop
Clients
Internal Addresses:
172.16.2.254
172.16.2.1-
172.20.2.1-
Internal Network 172.20.0.0/16
External Network 192.10.10.0/27
Internal Network 172.16.0.0/16
External Network 134.20.20.0/27
468 Chapter 9 • PIX Device Manager
This area provides a step-by-step exercise through the Startup Wizard
prompts.To admission the Startup Wizard, baddest Startup Astrologer from the PDM
Wizards menu.The Startup Astrologer Welcome window appears, as apparent in
Figure 9.8.
To advance with the wizard, bang Next. At any time during the Astrologer process,
you may avenue by beat Cancel. If you accept to avenue the Startup Wizard, a
confirmation window appears, as apparent in Figure 9.9.
www.syngress.com
Figure 9.8 The Startup Astrologer Welcome Window
Figure 9.9 The Avenue Startup Astrologer Confirmation Window
PIX Device Manager • Chapter 9 469
To avenue the Startup Window, bang Avenue and acknowledgment to the PDM main
window. If you appetite to advance with the Startup Wizard, bang Cancel to return
to the wizard.
Click Abutting to advance to the Basal Agreement Window. From this
window, you configure the PIX hostname and area name as able-bodied as the
Enable password.The Basal Agreement Window is apparent in Figure 9.10.
To change any of the settings, artlessly blazon a new hostname or area name
or bang the Change Accredit Countersign analysis box and access new authentication
credentials.You can adapt these settings from the System Properties tab in the
main PDM awning as well.To avenue the Startup Astrologer and save your changes at
any time, bang Finish. PDM updates the active PIX agreement and you
will acknowledgment to the PDM capital window.To abide with the wizard, bang Next.
The Alfresco Interface Agreement window appears (see Figure 9.11).
From the Alfresco Interface Agreement window, you can baddest the speed
of the alfresco interface and actuate how to abode the alfresco interface. From
the wizard, you can accept to automatically configure the interface via PPPoE.
You can additionally baddest DHCP to automatically actuate the abode of the outside
interface.
www.syngress.com
Figure 9.10 The Startup Astrologer Basal Agreement Window
470 Chapter 9 • PIX Device Manager
NOTE
Before application PPPoE or DHCP to configure the alfresco interface, verify
that your ISP is accouterment these services.
To statically configure the alfresco interface, baddest Static IP Abode and
provide the IP address, subnet mask, and absence aperture in the acreage provided.To
proceed with the wizard, bang Abutting to set up auto-update functionality.The
Auto Update Agreement window appears (see Figure 9.12).
Auto-update agreement facilitates the automatic advance and/or cull of PIX
device configuration, PIX firewall software, and PIX PDM software data. Autoupdate
functionality is an avant-garde adequacy and requires evidently available
services to operate, but it can be acutely accessible for organizations with many
PIX devices.To configure auto-update, bang Accredit Auto Update and provide
the adapted settings. Bang Abutting to advance to the Added Interfaces
Configuration window, as apparent in Figure 9.13.
www.syngress.com
Figure 9.11 The Alfresco Interface Agreement Window
PIX Device Manager • Chapter 9 471
www.syngress.com
Figure 9.12 The Auto Update Agreement Window
Figure 9.13 The Added Interfaces Agreement Window
472 Chapter 9 • PIX Device Manager
From the Added Interfaces Agreement window, you can configure the
remaining PIX firewall interfaces. Baddest an interface from the account in the Other
Interfaces Agreement window and bang Edit to change interface parameters.
A window agnate to that apparent in Figure 9.14 appears.
From the Edit Interface window, you can accredit or attenuate the interface and
configure added interface ambit such as speed, aegis level, name, and IP
address. Afterwards authoritative agreement changes, bang OK to acknowledgment to the Other
Interfaces Agreement window, again bang Abutting to abide with the Startup
Wizard.
The abutting window in the astrologer is NAT and PAT Configuration.The NAT
and PAT Agreement window is apparent in Figure 9.15. From this window, you
can configure the altered types of abode adaptation accessible on the PIX firewall.
To configure PAT, bang Use Port Abode Adaptation (PAT) and either
use the alfresco interface as the PAT abode or access a specific IP abode in the
space provided. If you would like to configure NAT, bang Use Network Address
Translation (NAT) and access the adapted all-around abode parameters. Finally,
to about-face NAT off, bang Do not construe any addresses. Bang Abutting to proceed
to the DHCP Server Agreement window, as apparent in Figure 9.16.
The PIX firewall can act as a DHCP server for centralized clients, which is quite
useful in baby office/home appointment (SOHO) environments. From the DHCP
Server Agreement window, you can authorize a basal DHCP server configuration.
To alpha DHCP server operations on the firewall, bang Accredit DHCP
server on the central interface and access a DHCP abode ambit in the space
provided.You can additionally adapt the DHCP charter breadth time from the astrologer as well.
When you’re finished, bang Next.
www.syngress.com
Figure 9.14 The Edit Interface Window
PIX Device Manager • Chapter 9 473
www.syngress.com
Figure 9.15 The NAT and PAT Agreement Window
Figure 9.16 The DHCP Server Agreement Window
474 Chapter 9 • PIX Device Manager
A awning appears to announce that the astrologer is complete. Bang Finish to exit
the wizard, save the changes fabricated during the astrologer process, and acknowledgment to the
PDM window.
After you complete the wizard, PDM sends the adapted configurations to the
PIX firewall and refreshes the PIX agreement arresting via the PDM interface.
After authoritative changes to the PIX firewall, you charge bang the Save to Flash
Needed button to save adapted configurations to the PIX beam memory. If you
fail to do so, the new configurations will not be accessible afterwards a reboot.