PIX routing

[chrislehr]

I have this for a sho route

outside 0.0.0.0 0.0.0.0 140.239.157.33 1 OTHER static
outside 140.239.157.32 255.255.255.224 140.239.157.37 1 CONNECT static
inside 172.16.0.0 255.255.0.0 172.16.1.101 1 CONNECT static
inside 206.235.140.0 255.255.255.0 172.16.1.3 1 OTHER static

Now, I want the PIX to pass packets on to another router 172.16.1.3 if they are destined for 206.235.140.0/24

Any idea how I can do this. And no, I do not manage the router at 172.16.1.3 (otherwsie it would be the default gw instead of the pix's internal int.

 

[webnetwiz]

You can try to use an access list and bind it to an interface, but you have to remember that PIX cannot do packet routing.

Check with Cisco to see what you can do.

 

[chrislehr]

Follow up on this one.

TAC said it is impossible to have the PIX route packets out the same interface they came in on. I have two options.

1) Get a small router inbetween the LAN and the PIX.
2) Get a third int for the pIX.

D'oH!

 

[StupraTT]

Thats split horizon for ya!
sup dude?
LOL

 

[sh0x]

The PIX won't do ICMP redirects, that's why it's impossible.