PIX-Rerouting Packets in and out to Inside-Interface

[daulagiri]

my PIX515E have a problem.

The inside-Interface is the Defaultgateway of the Clients in inside-LAN.

At the inside-LAN is another Router connected with an important LAN (Manufactur-LAN) behind.

The Clients cannot reach this Manufactur-LAN over The Default-Gateway inside-Interface of the PIX.

The Routing-Record to the Manufactur-LAN is OK, but i cannnot create a Rule in the PDM

from an to the same inside-Interface.

How can i solve this Problem without a redesign of the LAN.

[afakhan]

Hi,

PIX doesn't route a packet back to the interface where it came from.

There are two things that you can do:

1)change default GW from PIX inside to Router for your Clients, and then configure a default route on the router pointing to the PIX inside interface.

2)Configure a static route for Manufacturer LAN on the Client machines (if they are less in numbers) using the (route -p add ) command and point it to the Router, default GW will remain point to the PIX inside.

Regards,

Afaq