cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
800
Views
0
Helpful
1
Replies

PIX 525 Routing

mattransfer
Level 1
Level 1

i have a pix 525 with 2 interfaces and i am having problems routing through it.

i have allowed it to let all tcp/ip/icmp/udp requests in and out for the machine i am testing with, but i can not ping the outside interface from the inside. the pix itself can ping everything throughout my network. i put in the

route 0 0 (gateway) 1 command to get it to ping things, but i can not get through it. can anyone help??

Thanks

1 Reply 1

gsatchivi
Level 1
Level 1

If I am correct you are trying to pass traffic from an inside host to an outside host through your pix, yes? And you are trying to ping the outside intf of the pix from a host on the inside.

You cannot ping an interface of the pix from a host unless you are directly attached to that interface or coming from a segment that is on the same side as that interface. That is why from inside the pix you can ping all the interfaces and from your inside host you cannot ping the outside intf.

Since you are only using two interfaces, your basic config to allow traffic should include a nat and global entry to allow your inside hosts to go out. If you need to allow outside hosts in, you need static and conduit. Perhaps you have done all this already.

good luck

gilles

Review Cisco Networking for a $25 gift card