Routing with PIX

[nbowles]

I'm trying to connect our 2 offices via a branch office tunnel, but can't seem to get the PIX to route the traffic properly.


Network A = 10.0.0.0 255.255.255.0
Network B = 10.0.1.0 255.255.255.0

Everyone on Network A use the PX 10.0.0.1 as their gateway. There is also a VPN device, 10.0.0.31,to connect Network B.
Network B VPN device is 10.0.1.1

From the PIX I can ping 10.0.1.1 but any of the clients on the 10.0.0.0 network can not. If the clients set up their gateway to 10.0.0.31(VPN Device) all is well.


Here is the show route command

outside 0.0.0.0 0.0.0.0 24.97.295.98 1 OTHER static
inside 10.0.0.0 255.255.255.0 10.0.0.1 1 CONNECT static
inside 10.0.1.0 255.255.255.0 10.0.0.31 1 OTHER static
outside 24.97.295.98 255.255.255.248 24.97.295.49 1 CONNECT static
inside 137.135.128.0 255.255.255.0 10.0.0.80 1 OTHER static


Any suggestions?

 

[rudeboy]

This PIX won't send packets back out the same interface it received them on. The PIX is not a router. When it receives packets from network A on the inside interface, it will not send packets back out that interface. It will send it out any other interface. If you don't want to use your VPN device as the gateway, I suggest a router.

 

[NetworkGhost]

The Pix IOS version 7 is supposed to work better as a spoke and hub configuration for VPNs. What version IOS are you running?