Cisco Support Community
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

Pix-515 Stops forwarding PAT Traffic - CLEAR XLAT Fixes

I know the PIX-515 has been off support since 2007, but there is, still, one integrated into our network.  At times, it stops forwarding or responding to PAT traffic directed to an internal server on port 80 (www).  Nothing else on the device is impacted and it is fixed by clearing the translation table (Clear XLAT).  Is there a better fix than to constantly clear this table? 

Cisco Employee

Re:Pix-515 Stops forwarding PAT Traffic - CLEAR XLAT Fixes


Clearly there is an issue with either the connection or the translation. I would run a packet-tracer at the time of the issue and get the logs. We need to narrow it down a bit more.
Let me know

Sent from Cisco Technical Support Android App


Pix-515 Stops forwarding PAT Traffic - CLEAR XLAT Fixes

greetings  jon.

i bet the problem is the lack of memory ram for addressing all dinamic translation table on memory, so connection tracking is going corrupt and then nat is stop doing the task.

when you'll do clear xlate, the table goes to null and then could address new connections.

check out how many open connections you had on your PIX before stops working, and then before and after clear xlate check how much ram you had used then compare.

if you'll PIX has less than 128MB, just buy some SDRAM 128MB PC 133Mhz Memories and put them...

that's my idea.

had a great day and rate if this helps you.

had a great day . best regards, and rate if you'll find this post useful
Cisco Employee

Pix-515 Stops forwarding PAT Traffic - CLEAR XLAT Fixes

I bet not. A port redirection is a static translation, If you do a show Xlate prior sending traffic, the Xlate is there, no matter what happens. If anything should be failing would be the dynamic translations, not the static ones and this is not the case.

Bet if it was your guess, All dynamic translations should be failing.


CreatePlease to create content