Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Firewalls
[Top] [All Lists]

Route Priority on a PIX? OS 6.3

Subject: Route Priority on a PIX? OS 6.3
Date: Mon, 21 Mar 2005 16:07:32 -0500
If this isn't the best place to post this I apologize.

Been looking for some help on getting this scenario to work.

Imagine a network with 4 offices.  

A, B, C, and D.  A and B are connected by a T1, B and C are also
connected via t1.  These t1's are controlled by Cisco 2600's.  A, B, and
C all have a fully meshed PTP VPNs setup.  D is hanging off PTP VPN
connections to C and A, for different traffic.

A is also accepting easy VPN connections for remote users, who need to
talk to all offices.

To do all of this, I had to setup static routes on the A Pix to the WAN
routes to the other networks.

In doing so, I appear to have broken the routability (new word?) to the
PTP VPN connections to those other offices.

I had plans of setting up a GRE tunnel between the 2600's over the VPN
and using EIGRP to weight routes, to carry over incase we lost a t1, but
I cant get the tunnels to work, from A with those static routes
declared.

If I remove those static routes, I break the remote users, as well as
some traffic for D.

Is there any way I can do this, without adding an additional PIX to the
mix?

Thanks in advance

Conlan Adams

--------------------------------------------------------------------------
FREE Download - The Future in Desktop Firewalls is Available Now
 
NEW NetOp Desktop Firewall, the world's first driver-centric 
firewall software - protecting your laptops and corporate PCs at  
ring-zero! NetOp features sophisticated process & application
control, centralized management and multiple network user profiles -
NetOp is able to increase security when mobile users plug back 
into your network. Step into a more secure future - Try it FREE
http://www.securityfocus.com/sponsor/CrossTec_firewalls_050315
--------------------------------------------------------------------------


<Prev in Thread] Current Thread [Next in Thread>