Internal routing in PIX.

[chuachenhui]

I got a PIX 506e. With LAN IP subnet of 10.2.1.105. Default route to internet. All my PC point it as a default gateway. Now, I have another router with IP 10.2.1.1 which connected to remote network of 192.1.1.0.

I added a route inside 192.1.1.0 255.255.255.0 10.2.1.1 1. From PIX, i can ping 192.1.1.1. But if i try to ping 192.1.1.1 from PC,i got timeoute.

My douth is, does PIX support routing just like other router? I have no problem if i use router as default router.

Thank you.

[johansens]

The PIX doesn't allow this kind of routing. See here for more information:

(Scroll down to "Q. Can I operate the PIX in a "one armed" configuration?")

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_qanda_item09186a0080094874.shtml

You'll have to use your router as the default gateway, or put the router on a DMZ on the firewall.

[chuachenhui]

Oh, no, just as i expected. Thank you for your information. Appreciated that.