Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Help configuring static route on PIX

Posted on 2003-11-03
1
Medium Priority
?
1,168 Views
Last Modified: 2007-11-27
Here is a brief summary of my setup:

(untrusted network) - 10.15.0.0/24
           |
           |
           e1  
      [router]
           e0    10.5.5.2/24
           |
         (o)   outside interface - 10.5.5.1/24
        [PIX]
         (in) inside interface - 10.20.20.109/23
          |
  (trusted network)

The PIX is in under my control the router is managed by the vendor. I want to make sure that traffic from my netowork 10.20.0.0/16 can pass to the vendor's network, and that the PIX knows where to send their traffic bound for my network. I currently have 2 routes on my PIX:

inside 10.15.0.0  255.255.255.0  GW 10.5.5.2  Metric 1
inside 10.20.0.0  255.255.0.0     GW 10.20.20.1 Metric 1

*10.20.20.1 is the internal router

I guess my confusion deals with the "inside" before the route. Does this mean that this route only applies to traffic hitting the inside interface? Will traffic arriving at the outside interface know where to go?
0
Comment
Question by:MrWhitefolks
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 1

Accepted Solution

by:
swapsthegreat earned 150 total points
ID: 9677632
You will need to add a route

route outside 10.15.0.0 255.255.255.0 10.5.5.2

You will also need to delete the inside route to 10.15.0.0
The inside is just the interface name from where the traffic will be forwarded(outgoing).

The route provided above would forward all traffic destined to 10.15.0.0 to 10.5.5.2 through outside interface.
0

Featured Post

When ransomware hits your clients, what do you do?

MSPs: Endpoint security isn’t enough to prevent ransomware.
As the impact and severity of crypto ransomware attacks has grown, Webroot has fought back, not just by building a next-gen endpoint solution capable of preventing ransomware attacks but also by being a thought leader.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I don't pretend to be an expert at this, but I have found a few things that are useful. I hope that sharing them here will help others, so they will not have to face some rather hard choices. Since I felt this to be a topic of enough importance and…
In this article, WatchGuard's Director of Security Strategy and Research Teri Radichel, takes a look at insider threats, the risk they can pose to your organization, and the best ways to defend against them.
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, just open a new email message. In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …

704 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question