Hi Guys ....

    A firewall failed today, so as a hopefully short-term interim measure I
have fed a second public wire to a 515 PIX. This Pix now has 2 public
interfaces A & B.
Interface A is connected to ISP A, and Interface B is connected to ISP B. The
default gateway is set to Perimeter Router A out through interface A.

    My problem is that I can't ping out Interface A to Perimeter Router A. I
have setup several static routes to point out through Interface B (due to
global IP, and external company firewall rules) and these work.

    I beleive I have the necessary config in place for Interface A, such as
Global NAT pair, Statics and a test ACL permitting IP any any applied to the
inside and outsideA interfaces ..  What is more strange is that I can ping
from an external source to the outside interface of A, and mail is traversing
a static entry to an internal mail server !!!

    I totally understand that the Pix was not designed to perform this way,
but I was wondering if anyone has configured a Pix in such a way ?? or if
anyone has any advice !!! apart from fix the broken firewall   :)  .....

Kind regards

Paul ...




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=55729&t=55729
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Reply via email to