cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
259
Views
0
Helpful
3
Replies

interesting routing problem for PIX

tim.metzinger
Level 1
Level 1

I'm going to have a pix with two "outside facing" interfaces, and two "inside facing" networks. Both outside interfaces have paths to the internet. Lets call the interfaces:'

Outside1

Outside2

Inside1

Inside2

I need to be able to set up the pix so that traffic from the inside1 net always goes to the internet via the outside1 interface and router, and that traffice from the inside2 network always goes out via the outside2 interface and router.

I think I can do this by setting up static statements so that there are

static (inside1, outside1)

static (inside2, outside2)

statements only. Is this correct?

is there a way to do any sort of source-based routing on the PIX?

3 Replies 3

nkhawaja
Cisco Employee
Cisco Employee

the problem is more towards routing end. it is not as simple as defining static statements. i would prefer to have a router infront of the pix and let the router decide about it using source based routing.

scoclayton
Level 7
Level 7

Unfortunately, the static statements are not going to help in this case. Routing occurs before translations. The static statements you have suggested will only translate the source address, they will not steer the packets to a destination interface.

As Nadeem mentioned, there is no source based routing on the PIX so I really can't think of a way to make this work. I'll think on this tonight and post a reply in the morning if I think of something.

Sorry for the lack of help. I just wanted to stop you form wasting time on the static idea.

Scott

stevep
Level 1
Level 1

Hi,

I think you may be able to accomplish what you are trying to achieve by using policy NAT on the PIX. You can use either a global for translating addresses from a particular network or a static.

Check the following link it explains it nicely and shows you a configuration example.

http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_configuration_guide_chapter09186a0080172786.html#wp1113601

Review Cisco Networking for a $25 gift card