Firewall Wizards mailing list archives
Re: Multiple routes out
From: "Horvath, Kevin M." <KEVIN.M.HORVATH () saic com>
Date: Thu, 22 Jun 2006 18:20:25 -0400
Sure. Your natting will detrmine your routing. For ex your inside routable addresses can be nat0 or statically mapped. Then set up static routes for each interface/network. Then just set up your other static mappings and routes for the other nets --- Original Message --- From:"Oliver Humpage" <oliver () watershed co uk> Sent:Thu 6/22/06 6:05 pm To:"Firewall Wizards Security Mailing List" <firewall-wizards () listserv icsalabs com> Cc: Subj:[fw-wiz] Multiple routes out There must be a trick to do this, but I can't figure it out... It's kind of like routing based on source address rather than destination, but I'll explain (will try to keep it brief). I have two external networks coming into the building, and two corresponding internal networks. There is a Cisco ASA5510 (with Sec+ licence, OS 7.0.4) on the border, so essentially: Ethernet0/0 = OutsideNet1 Ethernet0/1 = InsideNet1 Ethernet0/2 = OutsideNet2 Ethernet0/3 = InsideNet2 To make matters interesting, InsideNet1 is made of routable IPs, whereas InsideNet2 is made of RFC1918 IPs, and hence the ASA will be static NATting them. Don't know if that makes a difference. So basically, anything coming in to the ASA on InsideNet1 needs to be given to the OutsideNet1 interface, and be routed to the default route there. Anything coming in on InsideNet2 needs to be given to OutsideNet2 interface (and be static NATted), and go to the default route on that interface. Any ideas how to go about configuring that? Or shall I give up now? :) Thanks as ever, Oliver. -- Oliver Humpage ICT Co-ordinator, Watershed Media Centre -- +44 (0)117 9276444 _______________________________________________ firewall-wizards mailing list firewall-wizards () listserv icsalabs com https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards _______________________________________________ firewall-wizards mailing list firewall-wizards () listserv icsalabs com https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards
Current thread:
- Multiple routes out Oliver Humpage (Jun 22)
- <Possible follow-ups>
- Re: Multiple routes out Horvath, Kevin M. (Jun 23)