topic dmz -pix - remote lan in Network Security

dmz -pix - remote lan

internetguard — Mon, 11 Mar 2019 11:35:06 GMT

hello all,

i am kindly ask you for your help in a strange situation. attached you will find a layout of my network.

all networks before R2 include the interface of this router on 10.10.10.0 network is pinging with Server X.

the host on Lan 192.168.239.0/24 does not ping.

what i want to do is to access this server from all networks without a static nat on inside network.

thank you!

Jon Marshall — Mon, 26 Nov 2007 08:17:50 GMT

Does the pix have a route back to the 192.168.239.0/4 netwrok via R1.

Could you send a copy of the pix config plus a "sh ip route" from both R1 and R2.

Jon

internetguard — Mon, 26 Nov 2007 08:43:54 GMT

yes,

route inside-net 192.168.239.0 255.255.255.0 192.168.40.20 1

also from host on 192.168.239.0 i can ping ip address of inside interface.

i will send also the config.

thank you

internetguard — Mon, 26 Nov 2007 09:46:24 GMT

thank you Jon , i found it.

it was a ACL on R2 🙂

thanks

Jon Marshall — Mon, 26 Nov 2007 09:55:13 GMT

No problem. Glad you found the solution and thanks for letting me know.