icmp translation

bmarms · ‎07-29-2009

i am getting the following error in my syslogs:

regular translation creation failed for icmp src inside:x.x.x.x dst outside:x.x.x.x (type 3, code 3)

although everything appears to be working fine. any thoughts?

tstanik · ‎08-04-2009

This message can be either an internal error or an error in the configuration.

%PIX-3-305006: Regular translation creation failed for protocol src int_name:IP_addr/port dst int_name:IP_addr/port

A protocol (UDP, TCP, or ICMP) failed to create a translation through the PIX Firewall. This message appears as a fix to caveat CSCdr0063 that requested that PIX Firewall not allow packets destined to network or broadcast addresses. PIX Firewall provides this checking for addresses that are explicitly identified with static command statements. With the change, for inbound traffic, PIX Firewall denies translations for a destined IP address identified as a network or broadcast address.

suschoud · ‎08-04-2009

do u have translation defined from traffic from inside to outside ,

nat (inside) 1 0 0

glo (outside) 1 interface

bmarms · ‎08-05-2009

absolutely.

nat (inside) 1 10.0.0.0 255.0.0.0

global (outside) 1 interface