[nsp] pix & ospf

Tomas Daniska tomas at tronet.sk
Tue Mar 2 04:43:00 EST 2004


ospf itself is up, running and working perfectly


the problem is that nat does not work for ospf-learned inside routes.
once a similar static route is configured, everything works nice

--

deejay  

> -----Original Message-----
> From: Mati Gil [mailto:mgil at servicom2000.com] 
> Sent: 2. marca 2004 10:42
> To: Tomas Daniska; cisco-nsp at puck.nether.net
> Subject: RE: [nsp] pix & ospf
> 
> By default, OSPF routing is disabled on the firewall 
> interfaces. To enable
> it use command "routing interface inside" (after configuring 
> OSPF global
> parameters, "router ospf 1"). Then, if needed, you can set
> interface-specific configuration through the routing 
> interface subcommands.
> 
> Mati
> -----Mensaje original-----
> De: cisco-nsp-bounces at puck.nether.net
> [mailto:cisco-nsp-bounces at puck.nether.net]En nombre de Tomas Daniska
> Enviado el: martes, 02 de marzo de 2004 10:15
> Para: cisco-nsp at puck.nether.net
> Asunto: [nsp] pix & ospf
> 
> 
> 
> hey all,
> 
> [maybe o/t but no cisco-pix list available...]
> 
> it seems to me that pix does not like ospf-learned routes from the
> inside side
> 
> 
> does anyone know if there's a trick to make the box like the routes,
> other than adding similar static routes to inside?
> 
> 
> thanks
> 
> --
> 
> Tomas Daniska
> systems engineer
> Tronet Computer Networks
> Plynarenska 5, 829 75 Bratislava, Slovakia
> tel: +421 2 58224111, fax: +421 2 58224199
> 
> A transistor protected by a fast-acting fuse will protect the fuse by
> blowing first.
> 
> 
> 
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
> 
> 
> 
> 
> 



More information about the cisco-nsp mailing list