> > works except the router won't respond to the PIXs ARP request for 
> > 192.168.1.1.  I doubt the network group will make the adjustment.
> 
> You can fill the arp cache yourself:
> 
> arp outside 192.168.1.1 00d0.xxxx.xxxx

this is what I missed - thanks

> > anybody else try installing a firewall with the "you can't change
> > anything" restriction? 
> > 
> Yeah - use a bridge.
 
welp, a bridge or proxy arp is the obvious way to go, but I needed to find
a way to make the Cisco work given the restrictions and circumstances of
the site.   

-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]

Reply via email to