Multiple internal subnets need internet access thru a PIX501

Unanswered Question

I have an internal network consisting of several subnets (on different vlans) that all need to access the internet thru a single cisco PIX501. These are the inside networks:

The outside network is

The PIX is address The internal networks are routed thru a layer 3 Catalyst 3550, and I know the packets are being routed to the PIX properly. However only computers on the same network as the PIX ( are getting to the internet. The other networks packets are being dropped.

I tried creating outbound ACLs but only managed to stop outbound traffic on all the networks by doing so. I am assuming I don't understand what I need in the outbound access list.

Could someone clue me in on what I need in my PIX configuration?



  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
pradeepde Tue, 04/18/2006 - 11:10
User Badges:
  • Bronze, 100 points or more

You have to check your subnet mask in the insdie and outside network. As the 3rd octet has been subnetting for inside network.

Fernando_Meza Tue, 04/18/2006 - 16:23
User Badges:
  • Gold, 750 points or more

You need to create a combination of NAT and Global statements allowing traffic from the inside networks to be NATed out to the Internet. Also make sure your access-list applied to your inside interface allow traffic from the internal subnets to any on port 80

... If you like please post the config and I will have alook for you


This Discussion