[c-nsp] FWSM Static NAT gets stuck..

Christian Koch christian at broknrobot.com
Mon Oct 20 19:09:06 EDT 2008


ok just had it happen again and i checked, and the correct arp entry
was there...



On Mon, Oct 20, 2008 at 10:58 AM, Ozgur Guler <gulerozgur at yahoo.co.uk> wrote:
> Do you see the correct arp for the translation when it stops working?
> You might need to define a static arp with alias to fix it.
>
>
> --- On Mon, 20/10/08, Christian Koch <christian at broknrobot.com> wrote:
>
> From: Christian Koch <christian at broknrobot.com>
> Subject: [c-nsp] FWSM Static NAT gets stuck..
> To: "Cisco-nsp" <cisco-nsp at puck.nether.net>
> Date: Monday, 20 October, 2008, 3:38 PM
>
> Hello All -
>
> Seeing an issue on FWSM running 3.2(4) code..
>
> Where a static nat gets stuck, and the host becomes unreachable via
> both ingress/egress
>
> If i issue a clear xlate local x.x.x.x, this clears things up and
> connectivity is restored
>
> there are currently 2 hosts on the same network, yet
>  this problem only
> occurs with one of them
>
> static (DMZ,OUTSIDE) 1.1.1.24 2.2.2.24 netmask 255.255.255.255
> static (DMZ,OUTSIDE) 1.1.1.25 2.2.2.25 netmask 255.255.255.255
>
> .24 is the one that becomes stuck, .25 is fine and never has a problem..
>
> any ideas/possible bugs?
>
> thanks
>
> christian
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>
> Send instant messages to your online friends http://uk.messenger.yahoo.com


More information about the cisco-nsp mailing list