cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
568
Views
0
Helpful
1
Replies

PIX and OSPF

joemarr_brodart
Level 1
Level 1

I have 1 router configured with BGP that is then connected to a PIX.

IP Block A is a class C that is has a /27 subnet used for loopback and numbered link addressing. A portion of the block is used on my PIX for static NAT translations.

I have OSPF configured on the PIX and the router. IP block is statically routed to NULL with a metric of 254 (for BGP announcements) on the router. I have a static route on the PIX pointing the entire class C to the outside interface. This route is redistributed into OSPF with a metric of 200. The intention of this is so that the router would see the announcement from the PIX, keeping me from putting a 2nd static route on the router pointing it to the PIX.

My problem is that when I reboot the pix and it comes backup, internal hosts can not reach the /27 network and external hosts cannot reach the nat translated addresses.

My question, What is the proper way of "routing" nat translated IPs? I guess they are currently being proxy arped by the PIX. I would prefer that I use OSPF to get the traffic from the router to the PIX, but maybe this isn't feasible.

1 Reply 1

didyap
Level 6
Level 6

PIX doesn't allow broadcast and multicast traffic to pass through it. Therefore, we can't use an Interior Gateway Protocol (IGP) such as Open Shortest Path First (OSPF), Enhanced Interior Gateway Routing Protocol (EIGRP), or Routing Information Protocol (RIP), all of which use broadcast and multicast packets to exchange routing information.

Review Cisco Networking for a $25 gift card