Routing PIX 515 6.3

In article , wrote: :Local LAN 192.168.1.0/24 default GW 192.168.1.1 :Pix ip : 192.168.1.1

:I have added a "route inside 10.10.1.0 255.255.255.0 192.168.1.11" on :the pix. :Now the PIX can ping the hosts, but the clients on 192.168.1.0 cannot :ping the 10.10.1.0/24 hosts.

You can't do that with PIX 6.3.

If you need to be able to do that, change the gateway of the machines on your local LAN to 192.168.1.11 and let that router forward any outside-bound packets to the PIX.

Alternately, upgrade to PIX 7.0(1) on your 515 (which might require upgrading the memory first.) This would not, however, be my recommendation.

:Yesterday i had another firewall instead os the PIX, and that worked :fine by just adding static routes.

And those other firewalls are probably vulnerable to the IPSec attacks announced in May. See below for more information:

Thank you for the answer..

I figured it out by setting another router in front of the pix, but thanks anyway.

You mentioned that the old Firewall's could be vulnerable, thats the reason for changing the setup, and equipment.

Thanks again.

/Kjo

Walter Robers> > :Local LAN 192.168.1.0/24 default GW 192.168.1.1