PIX - redirecting on the inside interface

I'm trying to setup a static route to a network on the inside interface of a PIX firewall. The thought is that instead of spreading a static route to all the users on the network, they should use their default route to the PIX, and there be redirected to another machine on the inside network. Now, I have set up the route properly as far as I can see, and the following shows up when doing a sh route (I have deleted the CONNECT lines and changed/omitted some IP addresses): outside 0.0.0.0 0.0.0.0 1 OTHER static inside 10.11.12.0 255.255.255.0 192.168.0.1 1 OTHER static

(10.11.12.0 is the network I want to reach through the 192.168.0.1 on the inside network)

When trying to access a webpage on the 10.11.12.x-network from a machine on the inside network (192.168.0.x), the connection is reset by the PIX.

Does the PIX not allow redirection of traffic on the inside interface?

Any other suggestions on what to try?

Thanks, Lasse

Reply to
Lasse
Loading thread data ...

No. The PIX is not a router. (It is possible starting with PixOs 7.x to redirect traffic between VPN peers on the same interface, but I do not tried this to allow routing on a stick. I doubt, it will work, because the internal pix logic needs two interfaces to pass traffic.)

Reply to
Lutz Donnerhacke

Thanks! Then I know we'll have to look for another solution. :)

Reply to
Lasse

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.