cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
548
Views
0
Helpful
1
Replies

Cisco 515 Static Translation problem

thestagman
Level 1
Level 1

I'm having some problems connecting to an address specified in the static translation command (194.70.60.3). I can ping the outside interface 194.70.60.2 no probs. But not this .3 address.

The Pix outside interface is connected to a Router 194.x.60.1 and all routing is correct.

Below is my Pix config.. I for one can't see what I have done wrong.. A fresh pair of eyes may spot the issue straight way.

nameif ethernet0 outside security0

nameif ethernet1 inside security100

interface ethernet0 100full

interface ethernet1 100full

ip address outside 194.x.x.2 255.255.255.224

ip address inside 10.250.1.10 225 255.255.255.252

hostname MIL-PIX-001

arp timeout 14400

no failover

logging buffered debugging

nat (outside) 0 0.0.0.0 0.0.0.0

nat (inside) 0 0.0.0.0 0.0.0.0

route outside 0.0.0.0 0.0.0.0 194.70.60.1 1

route inside 10.0.0.0 255.0.0.0 10.250.1.9

access-list ping_acl permit icmp any any

access-group ping_acl in interface inside

access-group ping_acl in interface outside

Static (inside,outside) 194.70.60.3 10.250.1.9 netmask 255.255.255.255

1 Reply 1

Jon Marshall
Hall of Fame
Hall of Fame

Mike

have you tried debugging on the inside and outside interface to see how far the packet is getting

ie

debug packet inside dst 10.250.1.9

debug packet inside src 10.250.1.9

Regards

Jon

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: