topic Re: default route on pix 506e in Network Security

default route on pix 506e

dbellamkonda — Mon, 11 Mar 2019 14:08:38 GMT

Can u help me with a default route when my pix already has ip address outside dhcp set route command in which pulls add from dhcp and when i tried adding anotehr static route ,, it says possible conflict as i have that one ,,

Re: default route on pix 506e

Jon Marshall — Wed, 05 Nov 2008 16:34:34 GMT

Devi

The pix will not be able to use 2 default-routes.

What does the routing table on the pix show at the moment

pix# sh route

what route are you trying to add and what are you trying to achieve.

Jon

Re: default route on pix 506e

dbellamkonda — Wed, 05 Nov 2008 16:41:43 GMT

we have dhcp set route on outside and on sh route we have default route for outside as static route pulling an address from dhcp server .

right now we are trying to give a static ip to cu and in order to do that am addin a default route pointing to interface bundle of router but as i already have one default route i am not able to add another one .

Lemme knw if u need ne thn

thnx for replyin soon

Re: default route on pix 506e

Jon Marshall — Wed, 05 Nov 2008 16:51:29 GMT

Sorry but it would really help if you could

1) Post the output of "sh route" from your pix

2) post the actual new route you are trying to add

Jon

Re: default route on pix 506e

dbellamkonda — Wed, 05 Nov 2008 17:03:19 GMT

Here, is the output of sh route

outside 0.0.0.0 0.0.0.0 12.x.x.x 1 DHCP static

inside 10.x.x.x 255.255.255.0 10.x.x.x 1 CONNECT static

outside 12.x.x.x 255.255.252.0 12.x.x.x 1 CONNECT static

here, is the one we want to add :

route outside 0 0 < new staic ip add>

Re: default route on pix 506e

Jon Marshall — Wed, 05 Nov 2008 17:07:15 GMT

Okay, you can't do that. Do you really need another default-route or is the new route just for some specific destinations ?

Jon

Re: default route on pix 506e

dbellamkonda — Wed, 05 Nov 2008 17:27:04 GMT

We are trying to assign a static route to cu, instead of getting an add from dhcp servers.

can you help me out,,how can we do that

Re: default route on pix 506e

Jon Marshall — Wed, 05 Nov 2008 17:31:56 GMT

Not sure what "cu" means ?

Assuming you want to put your own default-route in and not use the one assigned by DHCP

1) remove the "ip address dhcp setroute" command from your configuration

2) Add the following

route outside 0.0.0.0 0.0.0.0

Jon

Re: default route on pix 506e

dbellamkonda — Wed, 05 Nov 2008 17:36:57 GMT

command i have on pix is ip address outside dhcp setroute.

so do i have to add a new outside ip after i remove the above statement and then add route statement ,, right ..

Thnx a ton for ur quick responses jon

Re: default route on pix 506e

Jon Marshall — Wed, 05 Nov 2008 17:42:09 GMT

Sorry my last post was a little misleading.

If you want to keep DHCP for your outside interface but not get the default-route from DHCP

1) replace "ip address outside dhcp setroute" with "ip address outside dhcp"

2) add the default route as previous post.

If you want to assign a new IP address to your outside interface then

1) remove the complete line "ip address outside dhcp setroute"

2) configure the outside interface with your new IP address

3) add the default-route as per previous post.

Again, apologies if i mislead you.

Jon

Re: default route on pix 506e

dbellamkonda — Wed, 05 Nov 2008 17:58:53 GMT

Thnx ,

that was kewl..

Re: default route on pix 506e

dbellamkonda — Wed, 05 Nov 2008 22:45:28 GMT

Hey am srry ,, i just have a small issue here,

I have remote access to the pix and when i am trying to change the ip address dhcp to manuall address. i am loosing connectin as i lost the route and i trued to setup a static route with metrix > 1 and try , it wrked once and have issue again,, ne ideas ,,, am i good do we have any other process,,

thnx

Re: default route on pix 506e

dbellamkonda — Tue, 11 Nov 2008 19:19:21 GMT

Hey am srry ,, i just have a small issue here,

I have remote access to the pix and when i am trying to change the "ip address dhcp" to manuall address. i am loosing connectin as i lost the route and i trued to setup a static route with metrix > 1 and try , it wrked once and have issue again,, ne ideas ,,, am i good do we have any other process,,