PIX no route to....

Beat.Traber · ‎09-09-2008

PIX-501, Version 6.3(5)

My Interfaces are:

ip address outside 10.72.47.26 255.255.255.252

ip address inside 10.52.139.126 255.255.255.128

My routing table:

outside 0.0.0.0 0.0.0.0 10.72.47.25 1 OTHER static

inside 10.20.51.0 255.255.255.0 10.52.139.124 1 OTHER static

inside 10.52.139.0 255.255.255.128 10.52.139.126 1 CONNECT static

outside 10.72.47.24 255.255.255.252 10.72.47.26 1 CONNECT static

The inside interface is default-gateway for all traffic from the inside. The default route points to the outside. Some people want to communicate to a network 10.72.51.0/24 via a gateway 10.52.139.124 which is on the inside.

Whenever a connection attempt is made I see a log entry

%PIX-6-110001: No route to 10.20.51.18 from 10.52.139.60

Currently I've no idea why this occors and would be grateful for any suggestions.

Beat

matej.polak · ‎09-09-2008

Traffic that wants to leave the same interface (inside) where it has arrived will be dropped.

Source IP (10.52.139.60) in on inside.

Destination according to the log is 10.20.51.18.

According to the routing table the 10.20.51.18 is on inside.

Packet arrived at inside and should be routed to inside = dropped.