PIX default gateway to another internet box.

[ccoombs]

I have a odd situation. I want to use one of my PIX boxes that is set for my site to site vpns as the default gateway on our internal devices.

I would like this pix to forward all traffic, except specific traffic, to another firewall destine to the internet.

Is it posbile to have a pix with a default route to another system and still have other routes in the table?

Thanks!

[Daniel M]

It is possible to have a default route as well as several other routes configured on your PIX and I use such a configuration.

[ccoombs]

The message I get when I do this is

cannot add route entry. possible conflict with existing routes

I am adding a statement of "route inside 0.0.0.0 0.0.0.0 10.x.x.x 1" where 10.x is my internet firewall.

[Daniel M]

The only place I've ever put a default route was on the outside interface... and the PIX will not allow traffic out the same interface it came in on.