Cisco PIX internal interface and internal router interface

I have the following setup:
Internet -------------------- Cisco PIX ------- DMZ - 10.172.192.0 network
                                       /         |          
 Internal IP - 192.168.1.5     |            
                                                 | -------------Cisco Switch--Internal LAN 192.168.1.0      
                                                 |
 DR ----   Cisco Router ---------Internal  IP: 192.168.1.254

Default gateway is set to 192.168.1.254 for all clients.
The issue is to reach the DMZ, we have to set the gateway as 192.168.1.5.
What needs to be done on the firewall or the router to reach the DMZ with all the computers set for gateway of 192.168.0.254 and they can reach all the networks.
TopTechieAsked:
Who is Participating?
 
JFrederick29Connect With a Mentor Commented:
Add a route to the router:

conf t
ip route 10.172.192.0 255.255.255.0 192.168.1.5
0
 
TopTechieAuthor Commented:
Actually the route is added. I forgot to mention, the VPN users cannot access any machines unless the machines are set to 192.168.1.5 (the PIX interface). If I set it to 192.168.1.254 they don't even ping.

0
 
JFrederick29Connect With a Mentor Commented:
So you still can't access the DMZ hosts?

You also need a route to the VPN pool of addresses on the router.

ip route x.x.x.0 255.255.255.0 192.168.1.5

Where x.x.x.0 is the VPN subnet.
0
 
Markus BraunCEOCommented:
if your LAN is 192.168.0.x then your default gateway needs to be on the same Network not 192.168.1.254 but rather 192.168.0.x

like Fred says, on the router you need

ip route 10.172.192.0 255.255.255.0 192.168.1.5
ip route x.x.x.0 255.255.255.0 192.168.1.5

and on the ASA you need a route back for the 192.168.0.x Network

route inside 192.168.0.0 255.255.255.0 192.168.1.254 (guessing)

0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.