• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 412
  • Last Modified:

Cisco PIX internal interface and internal router interface

I have the following setup:
Internet -------------------- Cisco PIX ------- DMZ - network
                                       /         |          
 Internal IP -     |            
                                                 | -------------Cisco Switch--Internal LAN      
 DR ----   Cisco Router ---------Internal  IP:

Default gateway is set to for all clients.
The issue is to reach the DMZ, we have to set the gateway as
What needs to be done on the firewall or the router to reach the DMZ with all the computers set for gateway of and they can reach all the networks.
  • 2
2 Solutions
Add a route to the router:

conf t
ip route
TopTechieAuthor Commented:
Actually the route is added. I forgot to mention, the VPN users cannot access any machines unless the machines are set to (the PIX interface). If I set it to they don't even ping.

So you still can't access the DMZ hosts?

You also need a route to the VPN pool of addresses on the router.

ip route x.x.x.0

Where x.x.x.0 is the VPN subnet.
Markus BraunCEOCommented:
if your LAN is 192.168.0.x then your default gateway needs to be on the same Network not but rather 192.168.0.x

like Fred says, on the router you need

ip route
ip route x.x.x.0

and on the ASA you need a route back for the 192.168.0.x Network

route inside (guessing)

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now