Firewall Wizards mailing list archives

Re: PIX static NAT issue


From: Luca Berra <bluca () comedia it>
Date: Wed, 4 Jun 2003 22:49:33 +0200

On Wed, Jun 04, 2003 at 12:50:08PM +0100, Ahmed, Balal wrote:
The behaviour we are seeing is that 'the world' can access the dual homed
host on 10.10.10.21. 'The admins' can connect on 10.10.10.21 but not on
10.10.10.163. If a clear xlate is performed ONE icmp echo reply comes back
and then it stops working. When a ping is initiiated on 'host' to 'admins'
connectivity works until the xlate timesout.

a stab in the dark: does your host proxy arp?, does the pix?

L.



--
Luca Berra -- bluca () comedia it
       Communication Media & Services S.r.l.
/"\
\ /     ASCII RIBBON CAMPAIGN
 X        AGAINST HTML MAIL
/ \
_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards


Current thread: