> Usually the RIP routes are preferred if available.

PIX doesn't know about RIP routes afaik.

> > I wonder if they used static dial-ups, and put the static
> > routes in the PIX, it would work?
Yes.

> Well, someone may argue that a firewall (PIX is one, ain't?)
> shouldn't accept dynamic routing... For me, it sounds like a
> problem of some unclean security/routing concept if you have such
> issues. But I think you could solve it with zebra.
Bingo. The other solution that was offered:
Putting the suse machine in "front" of the PIX kind of defeats the purpose of
having the PIX at all...we won't get into that ;)
PIX doesn't use dynamic routing protocols last time I checked.
Only static routing.

Regards,
MD

-- 
Check the headers for your unsubscription address
For additional commands, e-mail: suse-security-helpsuse.com
Security-related bug reports go to securitysuse.de, not here

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]