Re: Routing question


Allen McIntosh ha scritto:

So, could this be a working scenario?

192.168.1.5 has to reach 10.8.0.6:
192.168.1.5 (src) -> 192.168.1.1 (its default gw) -> 192.168.1.76
(because of static route to 10.8.0.0 in the firewall) -> 10.8.0.6 (VPN
client)

In other words: can the default gateway contain a static route to another
internal host of the same LAN that will be the real gateway for that route?

It all depends on whether you can configure the gateway to do it. I've
seen it done, and the gateway was even nice enough to send back an ICMP
redirect to cut itself out of the loop.

My firewall is Cisco PIX (in detail 515E V6.3), it's the default
gateway for all internal PCs.
I tried to add a static route on the "inside" interface from 10.8.0.0
mask 255.255.255.0 to the gateway 192.168.1.76, but the only effect of
this is to ping 192.168.1.1 from the external VPN client, as it happens
by adding the route to any internal host.
But no redirection from other internal PCs... it seems that the route
remains limited to the traffic directed to the firewall itself...

Thanks a lot
Davide

.

Relevant Pages

  • Re: How to *ENABLE* icmp redirect on windows xp workstation ?
    ... > I'm using DHCP on the LAN and point default gateway to the internat ... > and the internet gateway forward the packet to innernet gateway. ... it sounds like a static route configured in your ...
    (microsoft.public.windows.server.networking)
  • Re: Routing and Remote access
    ... You can send traffic for a particular site through a particular gateway ... A static route takes priority over a default route. ...
    (microsoft.public.win2000.ras_routing)
  • Re: Connection issue
    ... You say that it will work by adding a static route to a particular ... segment if you add the route to the router which is their default gateway. ... > b) could even ping them.They access data fine now. ...
    (microsoft.public.windows.server.networking)
  • Re: Why this default route doesnt work ?
    ... We had this discussion here and folks told me that the default route should ... gateway to go. ... >> If the network ID is correct but the mask is wrong, ... >> you can use a static route with the host IP and a full mask: ...
    (microsoft.public.win2000.networking)
  • Re: Routing question
    ... can the default gateway contain a static route to another ... internal host of the same LAN that will be the real gateway for that route? ...
    (comp.os.linux.networking)