PIX

[yhsim]

Hello,

I am encountering the following error message "%PIX-6-110001: No route to dest_address from source_address" on my corporate PIX firewall. I am very sure that there is a route in the routing table. In other words, it is just routing between 2 different interfaces on the PIX firewall from higher to lower security i.e. dest_address is having lower security than the source_address.

Please advice what can I do next? Thanks.

[froggy3132000]

do you have a nat translation for these interfaces?

ex. static (inside,dmz)

then you will need an acl to support as well.

[yhsim]

Thanks froggy3132000.

I have the following nat translation command:

nat (inside) 0 0.0.0.0

nat (outside) 0 0.0.0.0

nat (dmz) 0 0.0.0.0

Is it necessary to configure the static command?

From what I understand, static command allows traffic to originate from an interface with a lower security to an interface with a higher security.

Please advice. Thanks.

[froggy3132000]

Please post your config.

And let us know exactly what traffic is not being routed correctly.