Hi all -
Had an interesting problem today, and I was wondering if someone might be able to explain to me what could have been happening.
I had this user that couldn't connect to the internet. After some snooping around, I noticed that the firewall wasn't building an xlate entry for her. Internally, routing seemed fine, because I could ping her device from our firewall and vice versa, and she was able to communicate to all internal services but nothing past our firewall. Her ip is assigned by dhcp and her PAT address falls under the Nat (1) 0.0.0.0 0.0.0.0 entry and matched to the global (1) address. Also looking at the Xlate table, there were over 100 entries for others in the same subnet she was in.
To resolve it, I switched to manual IP configuration, and switched it back to DHCP and it obtained a different IP address that the previous one and it worked fine.
So I guess my question is, what would prevent the firewall from building a dynamic translation from a specific private ip address.
Thanks for all the help.