Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations biv343 on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

static address translation loop

Status
Not open for further replies.

zionmaffeo

IS-IT--Management
Oct 2, 2003
1
US
I am working at a small site office that has a PIX 506 ver 6.2 that acts as the firewall/dhcp server/etc. I just added a seperate pix 501 ver 6.2 to act as a vpn server. The VPN is working fine however when i try to forward ports through the 501 it appears to create some sort of routing loop.

pix 506 = 10.10.10.1
pix 501 = 10.10.10.250

I add to pix 501

static (inside, outside) outside_ip 10.10.10.x
conduit permit tcp host outside_ip eq
All boxes on network 10.10.10.0/24 have 10.10.10.1 (PIX 506) as their gateway.

If I put 10.10.10.x to see 10.10.10.250 (PIX 501) as the gateway then the port forwarding works.

Is their anyway I can set this up so that i can port forward using pix 501 without using it as the gateway?

thanks
zman
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top