cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
308
Views
0
Helpful
2
Replies

Manage route with two Cisco PIX Firewall

phiz.petry
Level 1
Level 1

Hello,

I have 2 SDSL connection.

1) One connection with a PIX Firewall 525. IP address inside = 192.168.1.253

The PIX have a DMZ with one Server (IP address 192.168.200.1)

2) And one connection with an ISP router. LAN IP adress is : 192.168.1.254

All the PC have use Internet through this gateway : 192.168.1.254 And can access the server (192.168.200.1).

We cannot manage the ISP router, but there is probably a static route : ip route 192.168.200.0 255.255.255.0 192.168.1.253 for accessing the router located on the PIX 525 DMZ.

All is working good.

Today i must change the ISP router with a Cisco PIX 506.

The Cisco PIX 506 is configured with the same ip adress than the ISP Router : 192.168.1.254.

When i change the ISP router by the PIX, Internet works fine for the user. But the server (192.168.200.1) is not reacheable.

How can i add a static route for the PIX to reach then DMZ network.

I've tried the command :

route inside 192.168.200.0 255.255.255.0 192.168.1.253

with no success.

Thanks for your help

2 Replies 2

a.alekseev
Level 7
Level 7

You cannot do that because pix cannot send a packet, comming from the inside interface, backwards to the same interface.

PIX is not a router.

Ok it seem to be logical. But what is the solution if there is no router (only firewall).

Add a static route to all PC is there the last solution ?

Review Cisco Networking for a $25 gift card