Hello, I have a new app that is 3 teired. It has 2 dmz’s and I want to hang our corp network (150 users) off of the 2nd firewall. This is the general idea following the diagram. Internet goes to 2621 router which has 2 int’s each going to a pix 515. fw1 has 1 dmz and fw2 has a dmz and the corporate network on it’s inside int. I need to somehow route between these networks. Dmz must talk to dmz2, corp should be able to talk to anyone. All this will be setup through access-lists. Anyway my Q is this. The 2621 also routes to 2 remote WAN sites. Here are the 2621 ints
Eth1 = 207.xxx.xxx.177
Eht2 = 207.xxx.xxx.185
S0 = 192.x.x.1
S1 = 192.x.x.2
ATM 1/0 = 216.xxx.xxx.xxx
Internet
|
|
2621
^
/ fw1 fw2
| dmz ^
/ dmz2 corp network
Anyway S0 and s1 route to wan sites. I need to keep the routing between WAN’s up but still route between my LAN. I thought about static routes in the 2621.would this do the trick right now I am just advertising the networks with eigrp. As far as testing where things go is the only way with a sniffer? Traceroute doesn’t work on the pix’s. thanks
jdl
Eth1 = 207.xxx.xxx.177
Eht2 = 207.xxx.xxx.185
S0 = 192.x.x.1
S1 = 192.x.x.2
ATM 1/0 = 216.xxx.xxx.xxx
Internet
|
|
2621
^
/ fw1 fw2
| dmz ^
/ dmz2 corp network
Anyway S0 and s1 route to wan sites. I need to keep the routing between WAN’s up but still route between my LAN. I thought about static routes in the 2621.would this do the trick right now I am just advertising the networks with eigrp. As far as testing where things go is the only way with a sniffer? Traceroute doesn’t work on the pix’s. thanks
jdl