Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

how to troubleshoot pix with the <sackOK>?

Hi,

I have a problem on connecting to the server from one pc client end. The access list and static already been applied. The capture log shows below:

17:28:17.846101 129.1.16.121.4280 > 10.30.6.142.81: S 1745184384:1745184384(0) win 65535 <mss 1460,nop,nop,sackOK>

17:28:17.846422 10.30.6.142.81 > 129.1.16.121.4280: R 0:0(0) ack 1745184385 win 65535 <mss 1460,nop,nop,sackOK>

17:28:18.257387 119.1.16.121.4280 > 10.10.10.142.81: S 1745184384:1745184384(0) win 65535 <mss 1460,nop,nop,sackOK>

17:28:18.257677 10.10.10.142.81 > 119.1.16.121.4280: R 0:0(0) ack 1745184385 win 65535 <mss 1460,nop,nop,sackOK>

17:28:18.759070 119.1.16.121.4280 > 10.10.10.142.81: S 1745184384:1745184384(0) win 65535 <mss 1460,nop,nop,sackOK>

Please assist what could be the problem on this connection. I can do a ping to the server by granting the icmp request at access-list.

Thanks again.

CIndy

1 REPLY
Hall of Fame Super Blue

Re: how to troubleshoot pix with the <sackOK>?

Hi Cindy

You are getting a Reset back from the server on port 81. Can you confirm that there is a service running on this port ie. telnet to that port from a machine on the same subnet.

Could you also post the static and access-list information from the pix.

Jon

341
Views
0
Helpful
1
Replies