Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 
Community Member

Problem of routing with a PIX515

Information :

Our LAN with a PIX515 as gateway (

Other gateway in our LAN ( with tunnels with the Intranet of one of our branch office (Branch office LAN :

Description of the problem :

We have a PIX515 which is the gateway of our private LAN. I installed an other gateway in our LAN just used to access remote LAN of some of our branch offices in order to decrease the charge of our PIX515.

My problem is that the PC in my LAN should have the other gateway as default gateway when they want to access the remote Intranet of our Branch office. if I do this, it works (the tunnel connection)

However I need to keep the PIX 515 as default gateway, that's why I added a static route in the inside interface of our PIX which says that the is accessible via the other gateway (

When I am connected on the PIX, I can without any problem access to these remote LAN but when I am on a PC from our LAN I cannot, even if my default gateway is the PIX515.

For example, when I am on the PIX and if I make a "ping", it works

When I am on a PC ( for example) which default gateway is the PIX ( and which public default route is " mask via", it fails !

I make a "tracert" command to see where the packets are lost and that's the PIX which doesn't forward the packets to the other Gateway !

What's happens? why the PIX515 doesn't forward the packets as a single router ?

Please help me, it's very important ...

Community Member

Re: Problem of routing with a PIX515

You could'nt do this. A packet received By the PIX on one interface coul'nt be resend through the same interface . Actually, for security raeson, the pix drops the packets.

You have to use a router to make this staff.

I hope this will help you.

Community Member

Re: Problem of routing with a PIX515

The PIX (for security reasons) does not do icmp redirects and also cannot

inbound and outboud packet in the same interface.

(You cannot have translations slots for this)

SOLUTION: make you router the default gateway

CreatePlease to create content