topic Re: pix 7 static routing in Network Security

pix 7 static routing

dragec — Mon, 11 Mar 2019 11:42:05 GMT

- I have network 10.10.0.0/17 routed to int17

- I want to route one addr, 10.10.10.10/32 to interface 32

but traffic for 10.10.10.10 is sill going through int17. When I ping 10.10.10.10 from fw, it is routed ok.

wtf is going on?

Alan Huseyin Kayahan — Tue, 11 Dec 2007 12:38:56 GMT

Make sure route for 10.10.10.10/32 has a lower metric than 10.10.0.0/17 route

Please post the output of

sh run route

Regards

dragec — Tue, 11 Dec 2007 12:43:22 GMT

it has lower metric.

Alan Huseyin Kayahan — Tue, 11 Dec 2007 13:03:45 GMT

try issuing following commands

cl xlate

cl arp

cl route

dragec — Tue, 11 Dec 2007 13:14:44 GMT

well it is plan B, system is in production, so I'd like to avoid this clear arp and clear xlate operation

Alan Huseyin Kayahan — Tue, 11 Dec 2007 13:39:00 GMT

I see. Please post the output of following commands

sh run route

packter-tracer input inside tcp anipaddressinside 3389 10.10.10.10 3389 detailed

Regards