I didnt really know how to describe the subject, so here goes.
Using a 6513 to originate SSH connection to a 6509 through a Pix 535. that is what I'm attempting to do.
On Pix, 3 interfaces, outside sec level 0 192.168.15.11 /27, inside sec level 100, 192.168.15.33 /24, and a 3rd interface to be used for "mgmt" sec level 10, 10.10.10.1 /24.
On 6509, 2 physical interfaces 192.168.15.35 /24 and 10.10.10.2 /24.
from the 6513, I can ping to the 6509, thorugh the pix to both destinations.
However, from the 6513 I can only ssh to the 192.168.15.36 address.
I have noted, the following when pinging, using the sho conn on the pix
ping to 192.168.15.35
ICMP outside 192.168.15.10:152 Inside 192.168.15.35:0, idle 0:00:00, bytes 67608
ICMP outside 192.168.15.10:152 Inside 192.168.15.35:0, idle 0:00:00, bytes 67608
ping to 10.10.10.2
ICMP outside 192.168.15.10:153 Inside 10.10.10.2:0, idle 0:00:00, bytes 42336
ICMP outside 192.168.15.10:153 Jump_Mgmt 10.10.10.2:0, idle 0:00:00, bytes 42408
It appears the return traffic is coming back from the 6509 via the default route 0.0.0.0 0.0.0.0 192.168.15.33 RATHER than the connected route between the 2 10.10.10.0 /24 interfaces. I see a TCP deny on the inside interface coming from the 6509 (10.10.10.2) which seems would make sense since the traffic didnt originate through the inside interface enroute to the 6509...
i'm not sure how to over come this...
any help would be appreciated...
bruce
