topic Re: PIX routing in Network Security

PIX routing

imranghani — Fri, 21 Feb 2020 08:06:55 GMT

I am using NAT on PIX for Internet browsing. I have l3 shitch to devide internal network in 10 subnets. Users direct connected to PIX are able to brows Internet, while, users conencted though L3 shitch is not able to borws the Internet. Pl give the the solution.

Re: PIX routing

mhussein — Fri, 29 Apr 2005 05:23:20 GMT

Hello,

It would be helpful if you could post the pix configuration.

But anyway, some things to look for:

1. Is the pix nat'ing all subnets?

2. Does the pix have a route configured to every subnet?

3. Does the L3 have a "default route" pointing to the pix's inside interface?

Re: PIX routing

imranghani — Fri, 29 Apr 2005 05:41:42 GMT

Thankx Mr.Hussein,

Pl. find the configuration of PIX and L3 switch attached.

Re: PIX routing

mhussein — Fri, 29 Apr 2005 06:44:21 GMT

Only 3 ip addresses are assigned for hosts to access the internet, per this existing configuration:

global (outside) 1 x.x.x.245-x.x.x.247 netmask 255.255.255.240

To allow all internal hosts to access the internet using a single ip address, configure PAT as follows:

global (outside) 1 x.x.x.248 netmask 255.255.255.240

(you can use any public ip addres available, I just picked x.x.x.248)

Of course the hosts/servers configured with static statements are not affected.

The switch configuration is missing in the attachment. Just verify that there is a default route statement configured on the switch:

ip route 0.0.0.0 0.0.0.0 172.16.16.2

Please let us know if that helped.

Mustafa

p.s. please remember to mask or remove public ip addresses and sensitive info when posting configs.

Re: PIX routing

imranghani — Fri, 29 Apr 2005 10:16:16 GMT

Thankx Mr. Mustafa

Now it is working.

regards

Imran Ghani