Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 
New Member

allow EIGRP through the PIX

I have a customer who wants to allow EIGRP through the PIX. I have tried this in my lab (one router on PIX inside and another router on PIX outside) and can't get it to work. I also put the two routers on the same subnet (changed the IP address of one) and verified EIGRP was working correctly on each router.

Here's the relevant portions of the PIX config:

access-list outside permit icmp any any

access-list outside permit tcp any host eq www

access-list outside permit eigrp any any

access-list outside permit ip any host

access-list inside permit ip any any

ip address outside

ip address inside

global (outside) 1 interface

nat (inside) 1 0 0

static (inside,outside) netmask 0 0

static (inside,outside) netmask 0 0

static (inside,outside) netmask 0 0

access-group outside in interface outside

access-group inside in interface inside

I don't say this is a wise thing to do, I just want to know if it's possible. After all, the PIX accepts 'eigrp' as a keyword.

New Member

Re: allow EIGRP through the PIX

To permit outbound eigrp you will need to add

access-list inside permit eigrp any any

to establish the neighbors on seperate subnets, on the routers add the eigrp nieghbor command

neighbor x.x.x.x (the ip of the peer router)

note that using the neighbor command can cause some undesireable results by disabling the processing or sending of multicast packets on that eigrp interface. The last link below provide additional info on that.

CreatePlease to create content