topic Re: HELP! Weird Problem With PIX 501 in Routing and SD-WAN

HELP! Weird Problem With PIX 501

sarfarazkazi — Mon, 04 Mar 2019 11:13:21 GMT

Hi,

Attached is the network diagram and Pix Configuration. We have data circuits for all our branches just installed. The problem is that the Pix just stops to ping the branch Office routers.

1. From the Pix can ping 192.168.1.2 & 1.3

2. From 192.168.1.2 & 1.3 can ping all the networks.

3. From the Pix cannot reach the branch routers.

Appreciate all your support.

Regards

Sarfaraz

Re: HELP! Weird Problem With PIX 501

Marwan ALshawi — Thu, 09 Oct 2008 07:52:10 GMT

do the branch routers have route to the pix configured correctly ?

Re: HELP! Weird Problem With PIX 501

sarfarazkazi — Thu, 09 Oct 2008 08:22:45 GMT

Dear marwan,

Attached is the configuration of the branch router.

Sarfaraz

Re: HELP! Weird Problem With PIX 501

Marwan ALshawi — Thu, 09 Oct 2008 08:34:14 GMT

i can see the problem is routing issue

one more question the ISP routers belong to u ? i mean u have its config ?

can u tell me the IP address of directly conected interfaces of ISP1 and the brach router u sent me to give u the right config

Re: HELP! Weird Problem With PIX 501

sarfarazkazi — Thu, 09 Oct 2008 08:38:01 GMT

Dear Marwan,

Attached is the configuration of the HO router(isp1.txt) and the branch router (apbbr.txt)

Sarfaraz

Re: HELP! Weird Problem With PIX 501

Marwan ALshawi — Thu, 09 Oct 2008 08:49:08 GMT

in ur diagram there is somthing missing

what are these IPs

10.250.3.1

10.250.17.2

can u tell me what connectivity between the ISP rote and the brantch routers and do u have the connection direcrctly from pix to ISP?

and on ur pix i see u have the interface with ip 192.168.1.254

and u have other interface on the pis has ip in the same subnet !!!!

sorry but i want to be aware about the network

Re: HELP! Weird Problem With PIX 501

sarfarazkazi — Thu, 09 Oct 2008 08:55:57 GMT

The IPs are of the ISPs. My LAN range is (192.168.1.0/254) I am not well versed with Pix. This is how it is.. I am using these IPs from the range to route the branch subnets. It was working and then it stopped.

Pix IP- 192.168.1.254

ISP-1 router IP: 192.168.1.2

ISP-2 router IP: 192.168.1.3

I have attached the configuration of pix as well.

Re: HELP! Weird Problem With PIX 501

Marwan ALshawi — Thu, 09 Oct 2008 09:02:45 GMT

please

what these IPs represent

10.250.17.1

10.250.3.1

Re: HELP! Weird Problem With PIX 501

sarfarazkazi — Thu, 09 Oct 2008 09:04:34 GMT

these IPs belong to the ISP backbone. They are /30 subnets for routing in their internal network. I have nothing to do their network.

Re: HELP! Weird Problem With PIX 501

Marwan ALshawi — Thu, 09 Oct 2008 09:05:22 GMT

please

what these IPs represent

10.250.17.1

10.250.3.1

Re: HELP! Weird Problem With PIX 501

sarfarazkazi — Thu, 09 Oct 2008 09:27:48 GMT

I have already mentioned that the router belongs to ISP they are the ones who are routing it.

Re: HELP! Weird Problem With PIX 501

Marwan ALshawi — Thu, 09 Oct 2008 09:33:24 GMT

try to add the following line on ISP route

ip route 192.168.1.0 255.255.255.0 192.168.1.254

and let me know

Re: HELP! Weird Problem With PIX 501

sarfarazkazi — Thu, 09 Oct 2008 09:50:04 GMT

No it doesnt work. From pix (1.254) i can ping (1.2). From (1.2) I can ping 2.1,3.1,4.1. But from the Pix I cannot ping 2.1,3.1 & 4.1

Re: HELP! Weird Problem With PIX 501

Marwan ALshawi — Thu, 09 Oct 2008 10:08:23 GMT

the idea as follow

u have the static route configured corectly on ur PIX

on the ISP router u need static route point to each barnch offic network thorugh the isp ip u have

and u need a static route like

try the following line to the ISP router and try then try to pin

ip route 192.168.1.0 255.255.255.0 192.168.1.254

for returne traffic or traffic comeing from branch to ISP going to PIX

in ur ISP i have seen u done like

try the following line to the ISP router and try then try to pin

ip route 192.168.0.0 255.255.0.0 10.x.x.x

this include 192.168.1.0/25 so the traffic when wanna go to the PIX network will go back to the ISP and this is the problem u have

try to fix it based on the above directions

good luck

Re: HELP! Weird Problem With PIX 501

sarfarazkazi — Thu, 09 Oct 2008 10:20:07 GMT

yeah got it working now...thank u so much for your time and efforts..

Sarfaraz

Re: HELP! Weird Problem With PIX 501

Marwan ALshawi — Thu, 09 Oct 2008 10:24:44 GMT

i am glad its working now

was the static line the problem right ?