Is it possible to route a connected network with a bridged network?

[jl1508246]

Background:

at Location A, there is a PIX 515 connected directly to a HP 5308xl core switch. The ethernet interfaces on the PIX and 5308 are on the same network (192.168.0.0/16). There will be a Cisco 2621 with 4 interfaces, 2 serial, and 2 fast ethernet to be installed between PIX 515 & HP 5308xl. fa0/0 on the 2621 will face the PIX 515, and fa0/1 will face the HP 5308xl. I would like to bridge fa0/0 and fa0/1 so that the interfaces can exist on the same logical network 192.168.0.0/16. I do not want to route between fa0/0 and fa0/1 becuase there are a lot of configs in our PIX that refer to the 192.168.0.0/16 network such as 1-1 nats, wireless VLANs, etc.

s0 on the 2621 connects a pt-pt network (10.111.0.0/16), where at the other end of the pt-pt at Location B is a 1720 with another network - 10.110.0.0/16.

s1 is shutdown for now.

My question is - when I apply routing protocol at the 2621, will the bridged network of 192.168.0.0/16 be able to route between the other two networks 10.110.0.0/16, 10.111.0.0/16?

thanks very much

JL

[dbellaze]

I assume you will be configuring the 2621 with IRB. As long as your HP and PIX have routes statically or dynamically and they point to the BVI IP on the 2621 you should be fine.

Just remember not to point the routes to the remote locations to the PIX because it can't redirect traffic.

Daniel

[jl1508246]

thanks Daniel. Yes, I have configured the 2621 with IRB, and set an IP for the BVI1 interface. RIP has been enabled on the 2621, with the networks for the bridge (192.168.0.0) and the connected network on s0 (10.111.0.0) configured. I should be ready to cut over now.

I've enabled my BVI interface (no shutdown), should it be able to respond to a ping like any other interface at this point? Or does it physically have to be up?

[dbellaze]

The BVI interface status should be up and up just like any other interface. So once it is up you can ping and telnet to it just like any other interface.

Just make sure that your routing is set up properly between all your devices. The PIX supports RIP but only in a passive listening mode. It would probably be better to just use static routes on the PIX.

Daniel

[jl1508246]

thanks Daniel, the BVI interface came right up after cutting over. I can telnet/ping anything.

Expanding on the issue with routing on the PIX, RIP can only be used in listening mode so it updates a database based on RIP broadcasts it receives, but does not send out its own. That is perfectly fine in my scenario, I believe. If the PIX can learn from the 2621 about the 10.111.0.0/16 and 10.110.0.0/16 networks, i'm home free and there would be no need to setup static routes.

At this point, the RIP on the PIX is configured:

rip inside default version 1

should this be:

rip inside passive version 1

[dbellaze]

rip inside passive

Thats all you need to receive RIP routes. If you are using version 2 (which you enable manually) then you can specify the version.

To verify operation use

show rip

Daniel