362 | SRA 6.0 Administrator’s Guidetimeout sip-disconnect 0:02:00 sip-invite 0:03:00timeout uauth 0:05:00 absoluteaaa-server TACACS+ protocol tacacs+aaa-server TACACS+ max-failed-attempts 3aaa-server TACACS+ deadtime 10aaa-server RADIUS protocol radiusaaa-server RADIUS max-failed-attempts 3aaa-server RADIUS deadtime 10aaa-server LOCAL protocol localntp server 192.43.244.18 source outside preferno snmp-server locationno snmp-server contactsnmp-server community SF*&^SDGno snmp-server enable trapsfloodguard enabletelnet 0.0.0.0 0.0.0.0 insidetelnet timeout 15ssh 0.0.0.0 0.0.0.0 outsidessh 0.0.0.0 0.0.0.0 insidessh timeout 15console timeout 20dhcpd address 192.168.100.101-192.168.100.199 insidedhcpd dns 192.168.100.10dhcpd lease 600dhcpd ping_timeout 750dhcpd domain vpntestlab.comdhcpd enable insideterminal width 80banner motd Restricted Access. Please log in to continue.Cryptochecksum:422aa5f321418858125b4896d1e51b89: endtenaya#Method Two – SRA Appliance on DMZ InterfaceThis method is optional and requires that the PIX have an unused third interface, such as a PIX515, PIX 525, or PIX 535. We will be using the default numbering scheme of the SRA appliance.Step 1 From a management system, log into the SRA appliance’s management interface. By defaultthe management interface is X0 and the default IP address is 192.168.200.1.Step 2 Navigate to the Network > Routes page and make sure the Default Gateway is set to192.168.200.2 When done, click on the Accept button in the upper-right-hand corner to saveand activate the change.Step 3 Navigate to the NetExtender > Client Addresses page. Enter 192.168.200.201 in the fieldnext to Client Address Range Begin:, and enter 192.168.200.249 in the field next to ClientAddress Range End:’. When done, click on the Accept button in the upper-right-hand cornerto save and activate the change.Step 4 Navigate to the NetExtender > Client Routes page. Add a client route for 192.168.100.0 and192.168.200.0.Step 5 Navigate to the Network > DNS page and enter your internal network’s DNS addresses,internal domain name, and WINS server addresses. These are critical for NetExtender tofunction correctly. When done, click on the Accept button in the upper-right-hand corner tosave and activate the change.Step 6 Navigate to the System > Restart page and click on the Restart… button.Step 7 Install the SRA appliance’s X0 interface on the unused DMZ network of the PIX. Do not hookany of the appliance’s other interfaces up.
