Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Cisco 515 Static Translation problem

I'm having some problems connecting to an address specified in the static translation command (194.70.60.3). I can ping the outside interface 194.70.60.2 no probs. But not this .3 address.

The Pix outside interface is connected to a Router 194.x.60.1 and all routing is correct.

Below is my Pix config.. I for one can't see what I have done wrong.. A fresh pair of eyes may spot the issue straight way.

nameif ethernet0 outside security0

nameif ethernet1 inside security100

interface ethernet0 100full

interface ethernet1 100full

ip address outside 194.x.x.2 255.255.255.224

ip address inside 10.250.1.10 225 255.255.255.252

hostname MIL-PIX-001

arp timeout 14400

no failover

logging buffered debugging

nat (outside) 0 0.0.0.0 0.0.0.0

nat (inside) 0 0.0.0.0 0.0.0.0

route outside 0.0.0.0 0.0.0.0 194.70.60.1 1

route inside 10.0.0.0 255.0.0.0 10.250.1.9

access-list ping_acl permit icmp any any

access-group ping_acl in interface inside

access-group ping_acl in interface outside

Static (inside,outside) 194.70.60.3 10.250.1.9 netmask 255.255.255.255

1 REPLY
Hall of Fame Super Blue

Re: Cisco 515 Static Translation problem

Mike

have you tried debugging on the inside and outside interface to see how far the packet is getting

ie

debug packet inside dst 10.250.1.9

debug packet inside src 10.250.1.9

Regards

Jon

129
Views
0
Helpful
1
Replies
CreatePlease login to create content