Routing traffic betweek two firewalls

Posted on 2006-12-01
Medium Priority
Last Modified: 2013-11-16
Without going into details as to why.  I need to get two firewalls working on my network.  One is in place and the other is new.  We will call them Pix1 and ASA1, they are separate pieces of hardware.  In order to route traffic properly I will be injecting a router as the DG.  

Ok the setup will be as follows:
Inside int of both FW will be connected to the LAN
the LAN router's inside int will be attached to the LAN

Outside int of both FW will be connected to a switch separated from the LAN
The Edge Router(Internet) will be placed on the switch
The LAN router's outside int will be attached to the switch

I need to be able to route to either FW for the time being.  In order to get traffic to route through the FW's will this work, and do I need the LAN's outside int attached to the switch?

ip route (IP on PIX inside int)
ip route (IP of ASA1 inside int)
Question by:MrcJhnsn
LVL 12

Accepted Solution

Freya28 earned 750 total points
ID: 18056616
that is ok, but i do not beleive you need hte LAN router's outside int connected

Author Comment

ID: 18068865

Featured Post

Increase Security & Decrease Risk with NSPM Tools

Analyst firm, Enterprise Management Associates (EMA) reveals significant benefits to enterprises when using Network Security Policy Management (NSPM) solutions, while organizations without, experienced issues including non standard security policies and failed cloud migrations

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

This article is a collection of issues that people face from time to time and possible solutions to those issues. I hope you enjoy reading it.
How to fix a SonicWall Gateway Anti-Virus firewall blocking automatic updates to apps like Windows, Adobe, Symantec, etc.
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…
There's a multitude of different network monitoring solutions out there, and you're probably wondering what makes NetCrunch so special. It's completely agentless, but does let you create an agent, if you desire. It offers powerful scalability …

597 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question