topic Routing on same security interface in Network Security

Routing on same security interface

jkarkhanis — Mon, 11 Mar 2019 14:07:22 GMT

Hi,

I am using 7.0 on PIX 535A and have 4 different subnets on 4 physical interfaces 10.5.2.144/28, 10.5.2.160/28, 10.5.2.176/28 and 10.5.2.129/30. These interfaces are at same security level 100, I have enabled "same-security-traffic permit inter-interface" Still the devices in these subnets cannot communicate with other. Firewall is in routed mode.

Thanks for your help.

-JK

Re: Routing on same security interface

Alan Huseyin Kayahan — Tue, 04 Nov 2008 07:46:05 GMT

Hello Jayesh,

Try this

no nat-control

Regards

Re: Routing on same security interface

jmayes — Tue, 04 Nov 2008 21:10:50 GMT

Or, if you need NAT (because no nat-control turns off NAT globally), try defining either a NAT 0 or a nat 'NET STATIC' that NATs the address range from interface to interface.

There MUST be some NAT relationshoip between any two interfaces that wish to communicate.

Re: Routing on same security interface

Alan Huseyin Kayahan — Wed, 05 Nov 2008 00:04:26 GMT

no nat-control does not turn off NAT globally. Your nat statements will go on working. It only removes the "any traffic flow must match a NAT statement" must.