topic PIX Routing problems in Network Security

PIX Routing problems

RobboRobson — Fri, 21 Feb 2020 08:11:59 GMT

Dear all

I currently have at my HQ a PIX 515 which everyone connects to the internet through.

I have just installed a VPN Concentrator at the HQ and installed a VPN to a PIX 501 at a remote site.

I want the clients to be able to connect to that site so i put a static route on the 515 to point through the vpn concentrator.

Unfortunately the PIX doesn't seem to be routing the traffic to the remote site.

Any ideas??

I can do a route add on the local clients and ping the remote site so i know that the VPN is working correctly but the pix just doesn't seem to route any traffic.

All i have done is put in

route inside 192.168.30.0 255.255.255.0 192.168.1.6 1

Should i need to do anything else??

Thanks

James

Re: PIX Routing problems

a.alekseev — Fri, 10 Jun 2005 14:33:25 GMT

A pix is not a router.

Before PIXOS7.0 pix could not route traffic between vpn.

PIX can not send a packet comming on the interface back to the same interface.

Re: PIX Routing problems

wla1evc — Sat, 11 Jun 2005 02:18:34 GMT

the inside interface of your pix, i'm assuming is connected to a router. you'll need to put have a route for your vpn subnets pointing to the inside int of your concentrator.

Re: PIX Routing problems

RobboRobson — Mon, 13 Jun 2005 07:57:52 GMT

Sorry i wasn't clear enough

The PIX internal interface IP is 192.168.1.3

The Concentrator internal interface IP is 192.168.1.6

The Remote Sites IP Range is 192.168.30.0

On the PIX i have put in

route inside 192.168.30.0 255.255.255.0 192.168.1.6 1

But the PIX still won't route traffic to the remote site

Re: PIX Routing problems

wla1evc — Mon, 13 Jun 2005 12:52:22 GMT

you have a static route pointing to the concentrator, but does your concentrator have the route to get back to the subnets

Re: PIX Routing problems

RobboRobson — Tue, 14 Jun 2005 09:14:45 GMT

Do you know a link to where i could get the latest update for the PIX or if you could email me the files?

I tryed to find it on the Cisco website but they said there weren't any updates.

This would be much appreciated

Thanks

James

Re: PIX Routing problems

gargravarr — Wed, 15 Jun 2005 09:55:56 GMT

This maybe a dumb question, but is the PIX the default gateway on your network?

If so the pix does not have the ability to redirect clients using its routing tables.

As stated preveously the PIX is no a router, you may need to add static routes on your internal machines.

Re: PIX Routing problems

satish77 — Wed, 22 Jun 2005 04:43:57 GMT

http://www.cisco.com/cgi-bin/tablebuild.pl/pix

(CCO logon required)