Solved

Static routes in Pix

Posted on 2009-07-09
5
226 Views
Last Modified: 2012-05-07
I see the following route in the pix configuration. It seems that a few of them are not required. Would there be any reason to have all of these routes? For example, I see this route
route inside 10.176.0.0 255.240.0.0 192.168.22.3 1
Then I have the following
route inside 10.176.0.0 255.255.254.0 192.168.22.3 1
route inside 10.177.0.0 255.255.252.0 192.168.22.3 1
route inside 10.182.0.0 255.252.0.0 192.168.22.3 1
route inside 10.188.0.0 255.252.0.0 192.168.22.3 1
Wouldn't the first route cover these?
0
Comment
Question by:Jelonet
  • 3
  • 2
5 Comments
 
LVL 6

Expert Comment

by:tgtcat69
ID: 24813591
Yes

The first route would cover 10.176.0.0 - 10.191.255.255

0
 

Author Comment

by:Jelonet
ID: 24813873
Exactly. I understand that part, thank you. I was wondering if there would be any reason why the other routes would be used. Since they are staic routes, someone put them in there manually and I'm just not understnading why? I didn't want to delete them if they are needed for some odd reason.
0
 
LVL 6

Expert Comment

by:tgtcat69
ID: 24813903
They wouldn't be used.  The first line would encompass them.  From what I remember, once a packet finds a rule that it applies to it, it uses that rule.

0
 
LVL 6

Accepted Solution

by:
tgtcat69 earned 250 total points
ID: 24813920
I guess I should clarify...some systems use a fall through method where the last rule that is found is the one that is followed...as opposed to Cisco where the first rule that's found is the one that's used
0
 

Author Closing Comment

by:Jelonet
ID: 31601579
Thank you. I thought maybe I was missing something here. I know it will take the more specific route but they are all going to the same IP so...Oh well, I'm deleting them.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

How to configure Site to Site VPN on a Cisco ASA.     (version: 1.1 - updated August 6, 2009) Index          [Preface]   1.    [Introduction]   2.    [The situation]   3.    [Getting started]   4.    [Interesting traffic]   5.    [NAT0]   6.…
I recently attended Cisco Live! in Las Vegas, a conference that boasted over 28,000 techies in attendance, and a week of hands-on learning hosted by a solid partner with which Concerto goes to market.  Every year, Cisco displays cutting-edge technol…
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …
Both in life and business – not all partnerships are created equal. Spend 30 short minutes with us to learn:   • Key questions to ask when considering a partnership to accelerate your business into the cloud • Pitfalls and mistakes other partners…

821 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question