We have a scenario where a pair of PIXes exist, connecting two seperate entities, with outside interfaces on the same subnet.
We replaced one of the PIX firewalls with an ASA and had everything configured correctly, but communications between two entities would not work. I validated that our configuration was working by inserting my PC into the outside LAN and communicating through to the static NATs we had configured. The remote entity was unable to communicate into the side we had swapped out.
Due to time constraints, we rolled back the migration to the old PIX. When we booted it up, it didn't work either.
The resolution was to clear the arp table on the remote (on the same outside interface LAN) PIX.
Is this well known behavior and I just missed it, or is this an anomoly?
In hindsight, I feel as if we could have cleared the remote PIXes ARP cache and the new ASA would have worked.
Remember, the two FWs have the same broadcast domain in common on the outside interfaces.
Thanks in advance for your comments!