cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
575
Views
0
Helpful
2
Replies

PIX reroute back onto the same interface

conoufri
Level 1
Level 1

Can the PIX reroute packets back through the same interface it received them?

Thx,

C.

2 Replies 2

jboyer
Level 1
Level 1

The short answer is no.

What a router does is sends an ICMP redirect to the sending machine when the route for the destination is via another host on the same subnet. Then the route shows up in the sending hosts route table, so only the first packet goes to the default gateway the rest go to the correct next hop. The pix will not ICMP redirect.

If there are two paths out of your local subnet the default gateway must be a router that can ICMP redirect. Or add static routes to all the hosts.

The PIX cant do this right now. But it is a feature in 7.0, which will *hopefully* be out sometime early-mid 2005.