Question : Problem: cant route multiple vlans to internet

Heres my setup:

on my cisco 3560g I have 3 vlans
vlan 1 172.17.0.0 255.255.0.0    int ip 172.17.0.1
vlan 2 172.16.0.0 255.255.0.0    int ip 172.16.0.253
vlan 3 172.18.0.0 255.255.0.0   int ip 172.18.0.1

my pix insides ip is 172.16.0.254 255.255.0.0.  It is connected to a port which is configured for vlan2.

i have a route statement in the 3560 that routes 0.0.0.0 0.0.0.0 to 172.16.0.254.
So, any member of vlan 2 that uses the ip of the vlan as its gateway can get to the internet without any problem.  this is because the pix uses interface pat on the pixs external interface of 204.x.y.z.  i think that means that any traffic that originates from the 172.16.0.0 network gets translated to 204.x.y.z.  When a member of a vlan with a subnet that differs from the inside ip of the pix, it cant get out to the internet.  how do i fix this?  thanks for your help.

Answer : Problem: cant route multiple vlans to internet

Do you have the proper routes on the PIX?

route inside 172.17.0.0 255.255.0.0 172.16.0.253
route inside 172.18.0.0 255.255.0.0 172.16.0.253
Random Solutions  
 
programming4us programming4us