PIX / Routing question 1

[br0ck]

below is the network i'm working with
the pix it the GW for the 10.0.0.0 network
i have a pix ver 6.3.3
now i have added:
route inside 10.0.1.0 255.255.255.0 10.0.0.254 2
and the pix pings hosts on the other network fine
why will the pix not foward the 10.0.1.0 traffic to that network
i have to add the route into the servers for the remote users to get access
Please Advise

===========================================================
Internet
|
|
DSL Bridge
| Internet
| |
PIX Servers DSL ROUTER
|---------|-------| 10.0.0.0 10.0.1.0 |-----------------|
FRAME Router FRAME Router
10.0.0.254 |---------------768k--------------| 10.0.1.254

 

[yizhar]

HI.

This is a common problem.
The pix does not send traffic back to the interface it came from and does not send ICMP redirect messages.

I also use the same solution as you had, by specifing static route on the hosts.

For Windows servers, use the command:

route -p add 10.0.1.0 mask 255.255.255.0 10.0.0.254

For workstations, you can use a logon script with the same command but without the "-p" switch. However workstations normaly do not need access to the remote sites (only the administrator own workstations needs it) so this logon script is optional.

There are other optional solutions but this one seems to me like the best one, as you already have done.



Yizhar Hurwitz

http://teachers.sivan.co.il/yizhar

 

[br0ck]

thanks for the responce
i may put a router in the mix to fix this

BTW
i am intersted in you pix traffic monitor application
can you give me any information on it

support@inecta.com


Thanks
b-

 

[yizhar]

HI.

> i may put a router in the mix to fix this
Yes, this can solve the problem, but at the cost of additional point of failure.

> i am intersted in you pix traffic monitor application
I'll send you an email.

Bye



Yizhar Hurwitz

http://teachers.sivan.co.il/yizhar