topic Re: PIX in Network Security

PIX

yhsim — Fri, 21 Feb 2020 08:48:43 GMT

Hello,

I am encountering the following error message "%PIX-6-110001: No route to dest_address from source_address" on my corporate PIX firewall. I am very sure that there is a route in the routing table. In other words, it is just routing between 2 different interfaces on the PIX firewall from higher to lower security i.e. dest_address is having lower security than the source_address.

Please advice what can I do next? Thanks.

Re: PIX

froggy3132000 — Thu, 30 Mar 2006 13:25:07 GMT

do you have a nat translation for these interfaces?

ex. static (inside,dmz)

then you will need an acl to support as well.

Re: PIX

yhsim — Thu, 30 Mar 2006 13:51:43 GMT

Thanks froggy3132000.

I have the following nat translation command:

nat (inside) 0 0.0.0.0

nat (outside) 0 0.0.0.0

nat (dmz) 0 0.0.0.0

Is it necessary to configure the static command?

From what I understand, static command allows traffic to originate from an interface with a lower security to an interface with a higher security.

Please advice. Thanks.

Re: PIX

froggy3132000 — Thu, 30 Mar 2006 14:14:54 GMT

Please post your config.

And let us know exactly what traffic is not being routed correctly.