[c-nsp] FWSM Static NAT gets stuck..

[Ozgur Guler]

Do you see the correct arp for the translation when it stops working?
You might need to define a static arp with alias to fix it.


--- On Mon, 20/10/08, Christian Koch <christian at broknrobot.com> wrote:
From: Christian Koch <christian at broknrobot.com>
Subject: [c-nsp] FWSM Static NAT gets stuck..
To: "Cisco-nsp" <cisco-nsp at puck.nether.net>
Date: Monday, 20 October, 2008, 3:38 PM

Hello All -

Seeing an issue on FWSM running 3.2(4) code..

Where a static nat gets stuck, and the host becomes unreachable via
both ingress/egress

If i issue a clear xlate local x.x.x.x, this clears things up and
connectivity is restored

there are currently 2 hosts on the same network, yet this problem only
occurs with one of them

static (DMZ,OUTSIDE) 1.1.1.24 2.2.2.24 netmask 255.255.255.255
static (DMZ,OUTSIDE) 1.1.1.25 2.2.2.25 netmask 255.255.255.255

.24 is the one that becomes stuck, .25 is fine and never has a problem..

any ideas/possible bugs?

thanks

christian
_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Send instant messages to your online friends http://uk.messenger.yahoo.com