dmz -pix - remote lan

[internetguard]

hello all,

i am kindly ask you for your help in a strange situation. attached you will find a layout of my network.

all networks before R2 include the interface of this router on 10.10.10.0 network is pinging with Server X.

the host on Lan 192.168.239.0/24 does not ping.

what i want to do is to access this server from all networks without a static nat on inside network.

thank you!

[Jon Marshall]

Hi

Does the pix have a route back to the 192.168.239.0/4 netwrok via R1.

Could you send a copy of the pix config plus a "sh ip route" from both R1 and R2.

Jon

[internetguard]

yes,

route inside-net 192.168.239.0 255.255.255.0 192.168.40.20 1

also from host on 192.168.239.0 i can ping ip address of inside interface.

i will send also the config.

thank you

[internetguard]

thank you Jon , i found it.

it was a ACL on R2 :)

thanks

[Jon Marshall]

No problem. Glad you found the solution and thanks for letting me know.