topic Re: fw routing issue in Network Security

fw routing issue

dragec — Mon, 11 Mar 2019 12:28:51 GMT

hi I have following fw routing issue on pix 7 fw

route int2 x.x.x.5 255.255.255.255 gtw2 1

route int1 x.x.x.0 255.255.128.0 gtw1 2

I want traffic to x.x.x.5 goes over int2, but no metter what I do, traffic goes over int1. How to solve this?

Re: fw routing issue

Alan Huseyin Kayahan — Wed, 09 Apr 2008 13:07:43 GMT

Hi Dragan

I think issue is about your NAT statements. Please post attach your config, specify desired dest IPs.

Regards

Re: fw routing issue

dragec — Thu, 10 Apr 2008 05:56:19 GMT

static (int1,inside) x.x.x.0 x.x.x.0 netmask 255.255.128.0

static (int2,inside) x.x.x.5 x.x.x.5 netmask 255.255.255.255

Re: fw routing issue

Alan Huseyin Kayahan — Thu, 10 Apr 2008 10:18:19 GMT

Dragan,

Try this

static (inside,int1) x.x.x.0 x.x.x.0 netmask 255.255.128.0

static (inside,int2) x.x.x.5 x.x.x.5 netmask 255.255.255.255

If doesnt work, something else in your config might be preventing. Please post your sanitized config if doesnt work.

Re: fw routing issue

dragec — Fri, 11 Apr 2008 09:38:44 GMT

:-)) why would I do that? x.x.x.0 is behind int1 interface and x.x.x.5 is behind int2 interface.

Re: fw routing issue

Alan Huseyin Kayahan — Fri, 11 Apr 2008 12:31:51 GMT

http://forums.cisco.com/eforum/servlet/NetProf?page=netprof&CommCmd=MB%3Fcmd%3Dpass_through%26location%3Doutline%40%5E1%40.2cc02936/0#selected_message

Re: fw routing issue

manjula.dealwis — Fri, 11 Apr 2008 12:39:56 GMT

Hey Guys,

Dont you need to put nat as "static(High security int,Low securiy Int)Low securityIP,HighsecurityIP netmask 255X3" in security levels when it come to static Natting.

This is just a thought.