http://i24.servimg.com/u/f24/11/76/48/31/networ10.jpg
In the image above:
– ISP1 interface is connected to an aDSL router with a dynamic IP (FastEthernet0/1 Interface)
– ISP1 is default route for outgoing traffic
– I have NAT setup on interface FE0/1 (ISP1)
– ISP2 interface is static ip (Serial0/0/0 Interface)
– 222.1.1.0/27 Network is public IPs routed from ISP2
What I need is to have access to the Firewall from the internet through ISP2, while having a default route in the internet router go to ISP1. Right now I have a problem that when I a traceroute from internet to the Internet Router inside ip (222.1.1.1), the traceroute goes through ISP2 but ends on the ISP1 interface (222.1.2.1) and dies there.
Internet Router: Cisco IOS Software, 1841 Software (C1841-IPBASE-M), Version 12.4(1c)
Firewall PIX 501: Cisco PIX Firewall Version 6.3(3)
Config:
interface FastEthernet0/0
ip address 222.1.1.1 255.255.255.224
ip nat inside
!
interface FastEthernet0/1
ip address 222.1.2.1 255.255.255.0
ip nat outside
!
interface Serial0/0/0
ip address 222.1.3.1 255.255.255.0
!
ip classlessip
route 0.0.0.0 0.0.0.0 222.1.2.X
!
ip nat inside source list 1 interface FastEthernet0/1 overload
!
access-list 1 permit 222.1.1.0 0.0.0.31