PIX 501 - 2 networks behind inside interface

[tfiorda]

I have a 501 with an inside address of 172.29.123.253. I have a static route on the inside of '192.168.254.0 255.255.255.0 172.29.123.60 1'. This route points to another router that has the 192 network on its other interface. I also have RIP v2 turned on the PIX.

When pinging from either network, it gets timeouts. I did an ICMP debug and the PIX is denying the return route, even though there is a static route, the return is being aimed there due to it being the default GW on the 172 network.

Is there any way to allow the PIX to send the data to the correct GW? I know a router would probably work in this instance, but I only have a PIX and I want to prove the concept to my customer. Any suggestions?

Thanks,

Tony...

[nsteup]

Hi Tony,

the pix will never forward packets on the interface it has receiveed them. If the pix receives packets on inside they must be forwarded on outside. So packets from outside are being forwarded to 192.168.x.x.

Hope this helps

Norbert

[tfiorda]

Hello Norbert,

Yeah...I really knew that, but I was hoping... :-)

The port PIX okay, but not a 501.

Thanks,

Tony...