<div>
yes ive got all the ACL's in place...<br />
<br />
ill grab the config in a bit...<br />
<br />
Cheers
</div>


yes ive got all the ACL's in place...

ill grab the config in a bit...

Cheers

<div>
<div class="content wysiwyg-content">
Hiya People...<br />
<br />
Right, I have a Load Balancer which I need to NAT Straight through to the DMZ which sits on a PIX 515e.<br />
<br />
even when I allow NAT Straight through to the DMZ the packets get there but it looks like they don't get back.<br />
<br />
I get a NO Route to OutsideIP from DMZ Server IP (192.168.30.4)<br />
<br />
the network is as follows...<br />
External Routers - 123.123.123.1 and 123.123.123.3<br />
External Load Balancer - ExternalIPs eg 123.123.123.2 and 123.123.123.4<br />
PIX Outside IP - 123.123.123.5<br />
PIX dmz int IP - 192.168.30.6<br />
DMZ webserver - 192.168.30.4<br />
<br />
The machine in the DMZ can access webpages and has good internet access.<br />
<br />
The pix has a static route which i 0.0.0.0 0.0.0.0 123.123.123.3 - straight out of the External Router...<br />
<br />
anybody have any hints please?<br />
<br />
Thanks
</div>
</div>


Hiya People...

Right, I have a Load Balancer which I need to NAT Straight through to the DMZ which sits on a PIX 515e.

even when I allow NAT Straight through to the DMZ the packets get there but it looks like they don't get back.

I get a NO Route to OutsideIP from DMZ Server IP (192.168.30.4)

the network is as follows...
External Routers - 123.123.123.1 and 123.123.123.3
External Load Balancer - ExternalIPs eg 123.123.123.2 and 123.123.123.4
PIX Outside IP - 123.123.123.5
PIX dmz int IP - 192.168.30.6
DMZ webserver - 192.168.30.4

The machine in the DMZ can access webpages and has good internet access.

The pix has a static route which i 0.0.0.0 0.0.0.0 123.123.123.3 - straight out of the External Router...

anybody have any hints please?

Thanks

No Route to Outside from DMZ

Cisco PIX is a dedicated hardware firewall appliance; the Cisco Adaptive Security Appliance (ASA) is a firewall and anti-malware security appliance that provides unified threat management and protection the PIX does not. Other Cisco devices and systems include routers, switches, storage networking, wireless and the software and hardware for PIX Firewall Manager (PFM), PIX Device Manager (PDM) and Adaptive Security Device Manager (ASDM).