Using the PIX 501 as a router

[RAYMFC]

People

Can this be done using a 501, Can i redirect non internet traffic to a different device. i.e a router for a wan private network


Thanks

RAYMFC

 

[themut]

Yeap! All you have to do is enter the following command: route <interface-name> <subnet> <mask> <next-hop>

 

[RAYMFC]

Thanks

 

[br0ck]

Nope! not that easly! you can add the route in the pix but the pix will not foward the traffic &quot;like a router&quot;
the route command will only let the pix send to that route



to do this you will need to add the route to the pix as well as add the route to the device (ie: server, workstation, etc...)

 

[br0ck]

Oops! i missed the key word &quot;internet Traffic&quot;

yes this can be done by making the pix's gateway the router..

*
***internet
*
|
Router---WAN,PVT Line, Etc...
|
PIX
|
LAN

this will also allow you to control the traffic comming from the WAN link

___________________________________________________________
my setting was(that i reference in above)

*
***
*
internet
|
PIX
|
LAN---Frame Router1---Frame Router2--REMOTE LAN

here you need to add the routes to the hosts

 

[br0ck]

ok it's Apparently to early for me to answer pix questions
/need more coffee


well this topic has been well covered and i think from my ramblings you can get the information you need

 

[RAYMFC]

Hi br0ck
I'm using the PIX as the DCHP server. This is the config of the network
**Internet
**
¦
BTBroadbandRouter
¦
PIX
¦
LAN
¦
Wan router

What would i need to do??
Thanks for all your help

 

[br0ck]

ok

you need to add

route inside xxx.xxx.xxx.xxx 255.255.255.0 zzz.zzz.zzz.zzz

xxx.xxx.xxx.xxx = remote network address
zzz.zzz.zzz.zzz = interface to the remote network
route <interface-name> <subnet> <mask> <next-hop>
*
***
*
internet
|
PIX 10.0.0.1
|
LAN(10.0.0.0)---(10.0.0.2)Frame Router1---Frame Router2--REMOTE LAN(10.0.1.0)

10.0.1.0=xxx.xxx.xxx.xxx
10.0.0.2=zzz.zzz.zzz.zzz