PIX515 - not letting remote subnet out?

[stownsend]

I have 3 remote offices connected via Fram connection. I can ping the ehternet interface on the HQ reouter from the remote locations, so I know I'm routing packets. The Ethenet interface can get out of the network though the PIX, though all of the other remote offices cannot.

It seems like I need to allow their subnet to have access to the outside???

Thanks,

Scott<-

[yusuff]

You need to have routes for all these subnets for PIX to route packets back.

HTH

R/Yusuf

[stownsend]

So I added the following:

route inside 10.2.0.0 255.255.0.0 10.1.0.1 1

route inside 10.3.0.0 255.255.0.0 10.1.0.1 1

route inside 10.4.0.0 255.255.0.0 10.1.0.1 1

route inside 10.5.0.0 255.255.0.0 10.1.0.1 1

and I can from the PIX ping the remote ethernet interface on the other routers. Though from the other routers I cannot ping the PIX's internal interface. I can on the Router that is in the same subnet as the PIX.

From the remote networks I can ping the ethernet interface on the router in the same subnet as the PIX, so I'm pretty sure the issues are on the PIX.

I'm stull pretty new at all of this. so I'm sure its something pretty simple.

Thanks for your help!

Scott<-

[stownsend]

I've added routes for the other Subnets, though I'm not sure my NAT is letting them through.

Here is what I have so far:

access-list inside_outbound_nat0_acl permit ip any 10.0.0.0 255.0.0.0

global (outside) 1 192.168.126.21-192.168.126.59 netmask 255.255.255.0

global (outside) 1 192.168.126.20 netmask 255.255.255.0

nat (inside) 0 access-list inside_outbound_nat0_acl

nat (inside) 1 10.0.0.0 255.0.0.0 0 0

route outside 0.0.0.0 0.0.0.0 192.168.126.2 1

! Remote Office 1 Subnet

route inside 10.2.0.0 255.255.0.0 10.1.0.1 1

! Remote Office 2 Subnet

route inside 10.3.0.0 255.255.0.0 10.1.0.1 1

! Remote Office 3Subnet

route inside 10.4.0.0 255.255.0.0 10.1.0.1 1

! Remote Office 4Subnet

route inside 10.5.0.0 255.255.0.0 10.1.0.1 1

!Serial Port Subnets

route inside 10.254.0.0 255.255.0.0 10.1.0.1 1

Any Suggestions would be appreciated.

Thanks,

Scott<-