Cisco PIX Routing

[atacan2006]

Hello all,

I need your help. I cannot ping or access 2nd local subnet from PIX.

Structure:

PIX ---- Server 2003 ----Subnet1 + Subnet2

PIX

===

ip address outside pppoe setroute

ip address inside 192.168.5.254 255.255.255.0

Server 2003 IP Add1: 5.200

Server 2003 IP Add2: 10.200

From Client PCs I can access, ping internet addresses and other subnets. Working

From PIX I cannot only ping 5.200, cannot ping 10.200

What should I do?

Thanks in advance

PIX Config

==========

access-list 101 permit ip 192.168.5.0 255.255.255.0 192.168.3.0 255.255.255.0

access-list 101 permit ip 192.168.10.0 255.255.255.0 192.168.3.0 255.255.255.0

access-list 102 permit ip 192.168.5.0 255.255.255.0 192.168.3.0 255.255.255.0

access-list 102 permit ip 192.168.10.0 255.255.255.0 192.168.3.0 255.255.255.0

access-list 103 permit icmp any any

icmp permit any outside

icmp permit any inside

ip address outside pppoe setroute

ip address inside 192.168.5.254 255.255.255.0

ip local pool vpnpool 192.168.3.3-192.168.3.20

global (outside) 1 interface

nat (inside) 0 access-list 102

nat (inside) 1 192.168.5.0 255.255.255.0 0 0

nat (inside) 1 192.168.10.0 255.255.255.0 0 0

nat (inside) 1 0.0.0.0 0.0.0.0 0 0

access-group 103 in interface outside

Thanks in advance

Zati

[Jon Marshall]

Hi

Yes, very strange. If the clients on both subnets have the same builds/settings i would concentrate on the setup of the RRAS server.

Jon

[acomiskey]

Just curious, what is default gateway for 5 network clients, inside pix or rras server?

[atacan2006]

Clients have 192.168.5.254 (router inside)

RRAS Server has no Default Gateway for 192.168.10.0 network.

Also for 192.168.5.0 network RRAS Server Default Gateway is 192.168.5.254

[acomiskey]

Why is the default gateway for the router, the router? Why not inside pix?

[atacan2006]

Sorry acomiskey I didn't understand your question.

for the RRAS Server

Interface1:

===========

IP Address: 192.168.5.200/24

Default Gateway: 192.168.5.254 (IP Address of inside PIX)

Interface2:

===========

IP Address: 192.168.10.200/24

Default Gateway: (No Default Gateway)

[acomiskey]

ok sorry, you referenced 5.254 being router ip address above, not pix.

[estoeckle]

Any chance you are using Pix/ASA 7.2x OS? There seems to be an issue with having multiple inside subnets with routes. The same-interface-traffic command is supposed to resolve the issue but for me it is not working correctly.

I am having this same issue right now.

[atacan2006]

Hi, I think I should upgrade PIX firmware. I have 6.4 and that ICMP routing works only higher OS like 7.x

I'll inform you if it works.