no route ro message (message nr 110001)

Answered Question
Nov 17th, 2006
User Badges:

Hello all


Have a PIX with 6.3.4 running. Want to route traffic internal to a L3 device. Static route to inside are configured.

route inside 10.57.7.0 255.255.255.0 10.57.1.3 1


Default GW for internal devices are the PIX. If a device on inside tris to reach a host in the subnet 10.57.7.0, the PIX get the message "no route to 10.57.7.x from 10.57.1.x"

Watts the problem?

Correct Answer by a.kiprawih about 10 years 9 months ago

This is because PIX (by default) cannot re-route/redirect traffic to another L3 device. All traffic directed to PIX must be sent or go through PIX and going out its to other interfaces.


The 'route inside' statement above is to allow PIX to send traffic to the segment hosted on/by 10.57.1.3 L3 device.


Therefore, your internal host must point to other L3 device, or the 10.57.1.3 as gateway. Then, on the 10.57.1.3 device, add static/default route to PIX inside interface to allow access to internet/outside.


10.57.1.3:


ip route 0.0.0.0 0.0.0.0



Hope this helps. Pls rate all post(s)

AK

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
a.kiprawih Fri, 11/17/2006 - 09:24
User Badges:
  • Gold, 750 points or more

This is because PIX (by default) cannot re-route/redirect traffic to another L3 device. All traffic directed to PIX must be sent or go through PIX and going out its to other interfaces.


The 'route inside' statement above is to allow PIX to send traffic to the segment hosted on/by 10.57.1.3 L3 device.


Therefore, your internal host must point to other L3 device, or the 10.57.1.3 as gateway. Then, on the 10.57.1.3 device, add static/default route to PIX inside interface to allow access to internet/outside.


10.57.1.3:


ip route 0.0.0.0 0.0.0.0



Hope this helps. Pls rate all post(s)

AK

RENE SEGESSENMANN Fri, 11/17/2006 - 12:36
User Badges:

Hi, thank you for feedback.

I found the answer also on CCO. The PIX do not make ICMP redirect.


Question resolved.

Actions

This Discussion