RE: PIX ROUTE

I would go with Option 2.

1. Set the default route on your pix to route to your public router to the
Internet.
2. Set static routes internally to the pix to route to the interface
connecting the PIX to the WAN router.
3. Set your default route on your WAN router to rout to the pix.
3. Set static routes to route through the WAN.

That should do it.

James Williams, GISF
Network Systems Technician
West Texas A&M University
Phone: 806 651 2162
Fax: 806 651 2199
Email: jwilliams@mail.wtamu.edu
\x4e\x65\x74\x77\x6f\x72\x6b\x20\x53\x65\x63\x75\x72\x69\x74\x79\x20\x47\x65
\x65\x6b
 

-----Original Message-----
From: Hesperia DOS-IT Security [mailto:itsecurity@hoteles-hesperia.es] 
Sent: Wednesday, February 16, 2005 5:24 AM
To: firewalls@securityfocus.com
Subject: PIX ROUTE

Hi, I am about to make a big change in my network. I will describe the
scenario both scenarios. I have a Cisco PIX 515 connected to a switch (using
eth1). The same switch is connected to a router. The router connects me to
WAN, where I have some servers and users. The PIX connects me to Internet
using eth0. The hosts (users computers) have the pix IP (eth1) as the
gateway, because most of the traffic is www. Is it possible to static route
WAN connections (coming from eth1), using the same interface (eth1) [see
option1.jpg] ? Is it better to connect the router to the pix (eth2) and put
as a gateway the router [see option1.jpg]? Thanks.


Eduardo Di Monte