Pix with two networks... a big problem for me ...

[arnab77inkol]

Dear Friends..

My existing netowrk is like this...

Isp --> Private VPN Network (10 series ) + Public Series ( 203.x.x.x ) will be given on my 3745 router serial interface and i have PIX 515 E.. All these days my network is working fine...

Now we are upgrading our network.A new 1841 router is getting introduced...

The existing setup will continue.. + now the bandwidth's are getting partitioned... 10 series will be on old 3745 and Public network will be shifted to 1841... Now my problem is ...

PIX has only one external interface... how to incorporate these two routers with tow different networks into one PIX interface ?? For browsing i have proxy ... if my internal machine requires internet , my proxy should go to 1841 router and if my internal pc requires my Branch office connectivity it should go to 3745.. I am confused..as pix is having only one interface and only one default route can be there...

FYI both the routers are having fas 0/0 and fas 0/1..

Kindly suggest me a solution...

Thanks

[Fernando_Meza]

Hi .. you could configure the internal interfaces ( Ethernet) on both routers and the Public interface on the PIX to be on the same IP range .. for example 192.168.10.0/29 ( gives you 8 usable addresses ). I am assuming the internal interface of the PIX is already part of your LAN right ..?

You then need to configure 2 static routes on your PIX .. the one for any 10. address which should point to the 3750's internal interface as the next hop. The second is the default route which will have the 1841's internal interface as the next hop.

As you introduced a new range ( i.e 192.168.1.0/29) you need to also add a static routes on the routers for inbound traffic to your LAN .. the next hop will be the PIX's external interface.

I hope it helps ... please rate it if it does !!!