topic Re: Force route in Network Security https://community.cisco.com/t5/network-security/force-route/m-p/816097#M1020805 <HTML><HEAD></HEAD><BODY><P>Stephen </P><P></P><P>Can you post full config + an output of </P><P></P><P>"sh xlate" </P><P></P><P>Jon</P></BODY></HTML> Tue, 21 Aug 2007 19:07:29 GMT Jon Marshall 2007-08-21T19:07:29Z Force route https://community.cisco.com/t5/network-security/force-route/m-p/816089#M1020777 <P>We have a pix 501. I have a primary Ip on the outside interface of 68.x.x.21</P><P>I have a secondary IPaddress of 68.x.x.17 that handles incoming mail request. Tne problem is when I send mail through this pix the ip address shows up as 68.x.x.21 and not 68.x.x.17. I need the mail server to use the 17 address to send mail. I know the easy answer is to change the primary ip to the .17 but then I have to deal with external ftp servers we attach to that are setup to allow our ip address of .21</P><P></P><P>So wehat I need to do is force the mail server in my lan to send useing .17 instead of .21</P><P></P><P>Thanks</P> Mon, 11 Mar 2019 11:00:12 GMT https://community.cisco.com/t5/network-security/force-route/m-p/816089#M1020777 fundataca 2019-03-11T11:00:12Z Re: Force route https://community.cisco.com/t5/network-security/force-route/m-p/816090#M1020778 <HTML><HEAD></HEAD><BODY><P>Hi </P><P></P><P>if you use the following statement</P><P></P><P>static (inside,outside) 68.x.x.17 "internal mail server ip" netmask 255.255.255.255 </P><P></P><P>you don't need to worry about secondary addresses. </P><P></P><P>Jon</P></BODY></HTML> Tue, 21 Aug 2007 12:02:53 GMT https://community.cisco.com/t5/network-security/force-route/m-p/816090#M1020778 Jon Marshall 2007-08-21T12:02:53Z Re: Force route https://community.cisco.com/t5/network-security/force-route/m-p/816091#M1020783 <HTML><HEAD></HEAD><BODY><P>Hi Jon</P><P></P><P>The static is already in there. In bound work fine but on outbound My mail still looks like it comes from the 21 address and not the 17. Is there a acl I need to put in. </P><P></P><P>Thanks </P><P></P><P></P><P>Stephen</P></BODY></HTML> Tue, 21 Aug 2007 12:33:09 GMT https://community.cisco.com/t5/network-security/force-route/m-p/816091#M1020783 fundataca 2007-08-21T12:33:09Z Re: Force route https://community.cisco.com/t5/network-security/force-route/m-p/816092#M1020787 <HTML><HEAD></HEAD><BODY><P>Stephen </P><P></P><P>Shouldn't have to.</P><P></P><P>Can you post the NAT config from your firewall (santised)</P><P></P><P>Jon</P></BODY></HTML> Tue, 21 Aug 2007 12:39:39 GMT https://community.cisco.com/t5/network-security/force-route/m-p/816092#M1020787 Jon Marshall 2007-08-21T12:39:39Z Re: Force route https://community.cisco.com/t5/network-security/force-route/m-p/816093#M1020793 <HTML><HEAD></HEAD><BODY><P>Hi Jon</P><P></P><P>The static is already in there. In bound work fine but on outbound My mail still looks like it comes from the 21 address and not the 17. Is there a acl I need to put in. </P><P></P><P>Thanks </P><P></P><P></P><P>Stephen</P></BODY></HTML> Tue, 21 Aug 2007 12:40:02 GMT https://community.cisco.com/t5/network-security/force-route/m-p/816093#M1020793 fundataca 2007-08-21T12:40:02Z Re: Force route https://community.cisco.com/t5/network-security/force-route/m-p/816094#M1020801 <HTML><HEAD></HEAD><BODY><P>Hi Jon</P><P></P><P>Is this what you need. New at this so please bear with me. </P><P></P><P>Stephen</P><P></P><P> </P><P></P></BODY></HTML> Tue, 21 Aug 2007 12:46:34 GMT https://community.cisco.com/t5/network-security/force-route/m-p/816094#M1020801 fundataca 2007-08-21T12:46:34Z Re: Force route https://community.cisco.com/t5/network-security/force-route/m-p/816095#M1020803 <HTML><HEAD></HEAD><BODY><P>Since you configured the NAT statement, have you do a clear xlate or reboot the pix?</P></BODY></HTML> Tue, 21 Aug 2007 13:47:24 GMT https://community.cisco.com/t5/network-security/force-route/m-p/816095#M1020803 rigoberto.cintron 2007-08-21T13:47:24Z Re: Force route https://community.cisco.com/t5/network-security/force-route/m-p/816096#M1020804 <HTML><HEAD></HEAD><BODY><P>static has Always been there. Reboots a plenty since setup of static. Still no joy </P></BODY></HTML> Tue, 21 Aug 2007 14:14:24 GMT https://community.cisco.com/t5/network-security/force-route/m-p/816096#M1020804 fundataca 2007-08-21T14:14:24Z Re: Force route https://community.cisco.com/t5/network-security/force-route/m-p/816097#M1020805 <HTML><HEAD></HEAD><BODY><P>Stephen </P><P></P><P>Can you post full config + an output of </P><P></P><P>"sh xlate" </P><P></P><P>Jon</P></BODY></HTML> Tue, 21 Aug 2007 19:07:29 GMT https://community.cisco.com/t5/network-security/force-route/m-p/816097#M1020805 Jon Marshall 2007-08-21T19:07:29Z