TOPIC: PIX No Route error

PIX No Route error 13 years 4 months ago #8290

patrickh99
Topic Author
Offline
New Member
Posts: 4
Thank you received: 0

Hi all:
i have 4 logical interfaces (vlans) on one physical interface. I can route between 3 of the 4. Any traffic from dmz8 to dmz3 generates this error: %PIX-6-110001: No route to 192.168.3.x from 192.168.8.x

Traffic from dmz1 flows to/from dmz3, 8, & 9 ok
Traffic from dmz3 flows to/from dmz1 & 9 ok
Traffic from dmz8 flows to/from dmz1 & 9 ok
Traffic from dmz9 flows to/from dmz1, 3, & 8 ok

Show route:
dmz1 192.168.1.0 255.255.255.0 192.168.1.254 1 CONNECT static
dmz3 192.168.3.0 255.255.255.0 192.168.3.254 1 CONNECT static
dmz8 192.168.8.0 255.255.255.0 192.168.8.254 1 CONNECT static
dmz9 192.168.9.0 255.255.255.0 192.168.9.254 1 CONNECT static

TIA

Re: PIX No Route error 13 years 4 months ago #8296

MaXiMuS Offline Distinguished Member Posts: 111 Thank you received: 0	Check if you have assigned the same security level to both the interfaces Check this box to be notified of replies to this topic. Note: BBcode and smileys are still usable.

different security levels 13 years 4 months ago #8398

patrickh99 Topic Author Offline New Member Posts: 4 Thank you received: 0	I double-checked security levels, they are different. Check this box to be notified of replies to this topic. Note: BBcode and smileys are still usable.

Re: PIX No Route error 13 years 4 months ago #8428

sidd Offline Frequent Member Posts: 34 Thank you received: 0	Hi can you check the static or the nat translation. Also check the access rules for the same since the traffic flow from the high level interface would always be allowed but from a low level it wouold always be restricted. Sidd Check this box to be notified of replies to this topic. Note: BBcode and smileys are still usable.

No route 13 years 4 months ago #8518

patrickh99 Topic Author Offline New Member Posts: 4 Thank you received: 0	I checked the static, nat, and acl. Any time I have errors in them, I get a "no xlate" or "denied by acl" message instead of "no route" error. Check this box to be notified of replies to this topic. Note: BBcode and smileys are still usable.

No Route 13 years 4 months ago #8519

patrickh99 Topic Author Offline New Member Posts: 4 Thank you received: 0	Cisco TAC is baffled too. Check this box to be notified of replies to this topic. Note: BBcode and smileys are still usable.