We just purchased a new Cisco 2901 ISR for our network at work, something we desperately needed. Before that we had used our Watchguard x700 as not only our firewall but our router/nat etc. I installed the cisco router and everything went smoothly with that after I figured out the commanfd line for the device. The firebox x700 was abit unhappy when I switched it out of routed mode and into drop in mode.
I have attached a visual image of our network as I think it will give you a better idea of our setup. Currently the router has two interfaces. One for pur public ip's (lets pretend they are 192.168.1.1/27) and one for our internal network (10.0.0.1/24 - our LAN and 10.0.10.1/29 Our DMZ per se).
Interface 0 on the cisco is our "public interface"
IP address(es): 192.168.1.22 - primary
192.168.1.3 - secondary
192.168.1.4 - secondary
192.168.1.5 - secondary
192.168.1.23 - secondary
Interface 1 - Private network
IP address(es) 10.0.0.1 - Primary
10.0.10.1 - Secondary
From our interface 1 I connected a switch which has two VLAN's on it.
10.0.0.1/24 and 10.0.10.1/24
The IP's for the switch are:
From the switch I have our firebox connected with an IP of 10.0.0.3 and two video conference units plus one public server (10.0.10.3-10.0.10.5)
My problem is that I can not connect or ping the router when I am behind the firewall. If I plug directly into the switch and assing an IP address to myself staticly I can ping and connect to the router. However when I am behind the firewall I can not.
I have my rules set to allow ping either direction. What is very annoying is that with the firewall itself I can not run a ping test.
One thing that my drawing does not include is that I have my router plugged into the external interface and my lan plugged into my trusted interface.
Any idea as to why this is the case would be greatly appreciated. I can upload the cisco config file if you want.