topic another pix question in Network Security

another pix question

ubest888 — Fri, 21 Feb 2020 07:15:19 GMT

1. supposed that my headend router with IP addess of 207.172.3.1, my pix IP 207.172.3.2

do I have to put static route on my head end router to route all other traffic to 207.172.3.4 -207.172.3.254 to 207.172.3.2 (which is my pix outside IP, checkpoint requires these static routes))? Thanks.

2.I configure inside interface IP as

ip address inside 192.168.34.1 255.255.192.0

in pix 515 with IOS version of 5.2(6) with no problem.

in Pix 520 with IOS version 6.3 (2)

I got the following warning with

warning: unable to add route to OSPF RIB

what does it mean?

Re: another pix question

nkhawaja — Fri, 20 Feb 2004 20:42:50 GMT

Hi,

1-- No, you dont have to put static routes, since these IP belongs to directly connected network.

2-- I think this is a cosmetic error.

Re: another pix question

mostiguy — Sun, 22 Feb 2004 13:19:06 GMT

what are you trying to do? x.x.x-4 through 254 is not a legitimate ip subnet. You can do what you are doing if you just use .4 thru .254 as global addresses in global commands on the pix. If you want to allocate them for internal subnets on the pix, you will likely need to carve out .1 and .2, and use a 255.255.255.252 subnet mask on them for the outside int.

Are you using OSPF? Should you be? If you are getting errors re: ospf, you probably are