PIX As Gateway

[tckoon]

Hi,

I had PIX inside interface connect to vlan 1 with 2 routers. Both routers and PIX are running OSPF. When check on the routing table at PIX and the routers, all are perfect.

I have a host at Vlan 1, with default gateway point to PIX ip address. PIX can ping the networks behind the both routers, but host cannot ping to the network behind the routers.

If host default gateway change to one of the router IP, then it able to ping networks behind the routers.

Why ? If I insist want the host gateway point to PIX inside IP, what additional things need to perform at PIX ?

Thanks in advance.

regards.

[mostiguy]

What are there for access lists on the pix? You might be blocking icmp traffic on one of the interfaces.

[scoclayton]

Actually, the issue is most likely related to the fact that the PIX will not re-direct packets back out the same interface where they were received. In order for a packet to be passed by the PIX, the packet must have a different egress interface than ingress interface. In order to make this work, you will need to set the defualt gateway for your hosts on VLAN 1 to be one of the routers rather than the PIX. IOS can re-direct packets (as you've seen).

Hope this explains matters for you. And this is by design.

Scott

[tckoon]

Scott, thanks a lot.

Seen like I have to redesign it and make the gateway be the routers IP.

Regards.