PIX Transparent mode config problem

Unanswered Question
Jul 18th, 2008
User Badges:

Hi,


I have 2 networks in my LAN, i.e 192.168.1.X and 192.168.100.X

I am using PIX 7.0(5) between the two networks

PIX is configured in tranparent mode,

now I am unable to ping from one network to another,


Kindly let me know the reason for the above scenario,and also is there any alternate way to connect between 2 networks






Attachment: 
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 2 (1 ratings)
Loading.
srue Fri, 07/18/2008 - 19:11
User Badges:
  • Blue, 1500 points or more

pix in transparent mode acts as nothing more than a bridge, a proverbial 'bump in the wire'. ie, both networks on either side of the pix MUST be in the SAME network/subnet in order to communicate. you need to either re-address one side of your network to match the other, or put the pix back in routed mode.

kirankumarhm Fri, 07/18/2008 - 19:15
User Badges:

Thanks for reply,

if I put back to routed mode, is it possible to talk to each other network, because i tried that aswell, it didn't worked for me,


srue Fri, 07/18/2008 - 19:18
User Badges:
  • Blue, 1500 points or more

you will need to put an ACL inbound on which ever interface is the outside interface because traffic from the outside cannot, by default, enter the firewall...afterall, it is a firewall.

traffic from the inside interface (by default security level of 100) can get to hosts on the outside by default.

i left a bunch of stuff out, but hopefully this little bit will get you started.

Actions

This Discussion