05-18-2005 07:39 AM - edited 02-21-2020 12:09 AM
Hello,
I have 2 SDSL connection.
1) One connection with a PIX Firewall 525. IP address inside = 192.168.1.253
The PIX have a DMZ with one Server (IP address 192.168.200.1)
2) And one connection with an ISP router. LAN IP adress is : 192.168.1.254
All the PC have use Internet through this gateway : 192.168.1.254 And can access the server (192.168.200.1).
We cannot manage the ISP router, but there is probably a static route : ip route 192.168.200.0 255.255.255.0 192.168.1.253 for accessing the router located on the PIX 525 DMZ.
All is working good.
Today i must change the ISP router with a Cisco PIX 506.
The Cisco PIX 506 is configured with the same ip adress than the ISP Router : 192.168.1.254.
When i change the ISP router by the PIX, Internet works fine for the user. But the server (192.168.200.1) is not reacheable.
How can i add a static route for the PIX to reach then DMZ network.
I've tried the command :
route inside 192.168.200.0 255.255.255.0 192.168.1.253
with no success.
Thanks for your help
05-18-2005 08:19 AM
You cannot do that because pix cannot send a packet, comming from the inside interface, backwards to the same interface.
PIX is not a router.
05-18-2005 08:37 AM
Ok it seem to be logical. But what is the solution if there is no router (only firewall).
Add a static route to all PC is there the last solution ?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide