Routing on same security interface

jkarkhanis · ‎11-03-2008

Hi,

I am using 7.0 on PIX 535A and have 4 different subnets on 4 physical interfaces 10.5.2.144/28, 10.5.2.160/28, 10.5.2.176/28 and 10.5.2.129/30. These interfaces are at same security level 100, I have enabled "same-security-traffic permit inter-interface" Still the devices in these subnets cannot communicate with other. Firewall is in routed mode.

Thanks for your help.

-JK

husycisco · ‎11-03-2008

Hello Jayesh,

Try this

no nat-control

Regards

jmayes · ‎11-04-2008

Or, if you need NAT (because no nat-control turns off NAT globally), try defining either a NAT 0 or a nat 'NET STATIC' that NATs the address range from interface to interface.

There MUST be some NAT relationshoip between any two interfaces that wish to communicate.

husycisco · ‎11-04-2008

no nat-control does not turn off NAT globally. Your nat statements will go on working. It only removes the "any traffic flow must match a NAT statement" must.