Connecting 2 pixs on the same network segment
Posted on 2008-11-10
I have a Cisco ASA 5510 at 192.168.10.241. I have DMZ 192.168.200.0 on one of the VLANS and of course our default route to the internet. Recently we added a faster connection to the internet just for the IT department. I am aware that I can not have 2 Default routes on an ASA or Pix. What I wanted to do as a work around is this. I have a Pix 515 that I set up as 192.168.10.253, and gave it a default route to the internet vis our new connection and I set a static route to our DMZ in the routing table. When I switch my PC to use the default route of 253 I can get to the internet, but can not communicate with any device in the DMZ. To test where my problem lies I hooked up a ratty Linksys Router in place of the PIX. I set a static route to the DMZ and it works perfect. Am I missing something on the PIX? I have read a few posts that doing this is not legal for a PIX. I can't see why. Or at least I can't see why this can not be overridden.