PIX routing

[imranghani]

I am using NAT on PIX for Internet browsing. I have l3 shitch to devide internal network in 10 subnets. Users direct connected to PIX are able to brows Internet, while, users conencted though L3 shitch is not able to borws the Internet. Pl give the the solution.

[mhussein]

Hello,

It would be helpful if you could post the pix configuration.

But anyway, some things to look for:

1. Is the pix nat'ing all subnets?

2. Does the pix have a route configured to every subnet?

3. Does the L3 have a "default route" pointing to the pix's inside interface?

[imranghani]

Thankx Mr.Hussein,

Pl. find the configuration of PIX and L3 switch attached.

[mhussein · Accepted solution]

Only 3 ip addresses are assigned for hosts to access the internet, per this existing configuration:

global (outside) 1 x.x.x.245-x.x.x.247 netmask 255.255.255.240

To allow all internal hosts to access the internet using a single ip address, configure PAT as follows:

global (outside) 1 x.x.x.248 netmask 255.255.255.240

(you can use any public ip addres available, I just picked x.x.x.248)

Of course the hosts/servers configured with static statements are not affected.

The switch configuration is missing in the attachment. Just verify that there is a default route statement configured on the switch:

ip route 0.0.0.0 0.0.0.0 172.16.16.2

Please let us know if that helped.

Mustafa

p.s. please remember to mask or remove public ip addresses and sensitive info when posting configs.

[imranghani]

Thankx Mr. Mustafa

Now it is working.

regards

Imran Ghani