I would like to know whether we will be able to configure IP directed broadcst, or helper address in PIX.
The scenario is something like this.
There are two networks connected through internet. At one location we have PIX 515 (PIx version 6.2) and other location we have a uBR router (IOS 12.2) and a IPSEC tunnel is formed between router and PIX. Router's LAN network is 10.100.0.0 and PIX inside network is 192.168.0.0.
I want to configure the PIX and the router is such a way that if a directed broadcast is transmitted from the network 192.168.0.0 (i.e, 192.168.255.255), it has to reach the other end network (i.e, 10.100.0.0) through the tunnel.
Can't say I've ever tested this, but I don't see why it wouldn't just work, assuming your crypto access-lists allow it to be encrypted. Why would there be a packet sourced from a broadcast address, going to a broadcast address anyway, that doesn't make sense.
I would think if your crypto ACL on the PIX has:
> access-list encrypt permit ip 192.168.0.0 255.255.0.0 10.100.0.0 255.255.0.0
then any packet matching that should be encrypted. Your uBR ACL will have to be the opposite of that, but it should work.
Similar to IP helper address which we used to configure in routers, is there any command that can be configured in PIX, so that the broadcast in the LAN (192.168.255.255) will be send to 10.100.0.0 network.
Login to the FXOS chassis manager.
Direct your browser to https://hostname/, and log-in using the user-name and password.
Go to Help > About and check the current version:
Check the current version availa...
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...