To configure a Cisco PIX 515 Firewall, first, connect your Cable or DSL modem to the Ethernet 0 interface on the firewall with a Straight-Through Ethernet RJ45 cable. Then, connect another Straight-Through Ethernet RJ45 cable from the Ethernet 1 interface on the firewall, to an available port on a switch or hub. Then, connect the blue rollover cable from the Console port on the Cisco PIX 515, to the serial port on your computer. Then, turn the firewall on. Then, open HyperTerminal. Once you open HyperTerminal, type in any name that you want to use. Then, select any icon. Then, click OK. Then, next to "Connect Using," select the proper serial port, that you connected the rollover cable to. Then, click OK. Next to "Bits per second," select 9600. The "Data bits" should be 8, the "Parity" should be none, and the "Stop bits" should be 1. Next to "Flow control," select none. Then, click OK. Then, press Enter on your keyboard. If it asks you to perform an initial configuration, type no. Now, you should be at the firewall's prompt, which should look similar to pixfirewall>. The commands below are using pixfirewall as the prompt. Now, follow the commands below:
pixfirewall> enable
(If applicable, type in a passWord. If no passWord was assigned to the firewall, just continue).
pixfirewall# configure terminal
pixfirewall(config)# nameif ethernet0 outside security0
pixfirewall(config)# nameif ethernet1 inside security100
pixfirewall(config)# name x.x.x.x pix_outside
(Note - The x.x.x.x represents your "outside" IP Address, or the IP Address that your ISP is giving you).
pixfirewall(config)# name x.x.x.x PIX_inside
(Note - The x.x.x.x represent the IP Address for the local network interface on the firewall (the Ethernet 1 interface).
pixfirewall(config)# interface ethernet0 100full
pixfirewall(config)# interface ethernet1 100full
pixfirewall(config)# ip address outside pix_outside 255.255.255.0
(Note - The 255.255.255.0 here assumes that it is the subnet mask for your internet connection. If your Internet connection uses a differnet subnet mask, replace that subnet mask with the correct subnet mask).
pixfirewall(config)# ip address inside pix_inside 255.255.255.0
(Note - The 255.255.255.0 here assumes that your local network (inside network) uses that subnet mask. If you are using a different subnet mask for your local network, replace that subnet mask with the correct subnet mask).
pixfirewall(config)# ip address inside x.x.x.x
(Note - The x.x.x.x represents the IP Address for the local network interface on the firewall (the Ethernet 1 interface).
pixfirewall(config)# outbound 10 deny 0.0.0.0 0.0.0.0 0 ip
(Note - The 2 outbound commands below only allow ports 80 and 443 to go outbound. If you do not want to block any ports that go outbound, do not type the following 2 commands in).
pixfirewall(config)# outbound 11 permit 0.0.0.0 0.0.0.0 80 tcp
pixfirewall(config)# outbound 12 permit 0.0.0.0 0.0.0.0 443 tcp
(Note - The command below is used if you do not want to block any outbound ports).
pixfirewall(config)# outbound 10 permit 0.0.0.0 0.0.0.0 0 ip
pixfirewall(config)# NAT (inside) 1 0 0
pixfirewall(config)# Global (outside) 1 interface
pixfirewall(config)# route outside 0 0 <gateway IP address> 1
(Note - The Gateway IP Address is the Default Gateway for your Internet connection, that your ISP is giving you).
pixfirewall(config)# write memory
This completes the configuration of the Cisco PIX 515 Firewall.
Copyright © 2026 eLLeNow.com All Rights Reserved.