Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

PIX 515E arp problem

Hi!

I have a PIX ?arp problem? that is somewhat strange. In a network used solely for Internet access there are three PIX firewalls, one 506e and two 515e failover pairs, total five boxes. All use PIX OS 6.3(5) and the only other unit in this network is the ISP router.

The network is connected using two C3750 stacks separated by a fiber (different locations). The 506e and one pair of 515e is located on one side/switch, and one 515e pair and the ISP router is located on the other side.

Sometimes the 515e on the same side/switch that 506e cannot reach the 506e. Ping doesn?t work and VPN is down etc. Connections from the other side/Internet to 506e still works indicating that the 506e is OK. Normally, the connection is working again after about four hours (arp timeout). If I clear the arp cache manually in the ?failing? 515e it works immediately.

I thought that a static arp entry would solve the problem but it didn?t. Any ideas?

Ping output?

PIX ON THE SAME SIDE:

fwgbg001# ping x.x.x.x

x.x.x.x NO response received -- 1000ms

x.x.x.x NO response received -- 1000ms

x.x.x.x NO response received -- 1000ms

fwgbg001#

PIX ON THE OTHER SIDE:

fw01# ping x.x.x.x

x.x.x.x response received -- 0ms

x.x.x.x response received -- 0ms

x.x.x.x response received -- 0ms

fwgbg001# clear arp

fwgbg001# ping x.x.x.x

x.x.x.x response received -- 0ms

x.x.x.x response received -- 0ms

x.x.x.x response received -- 0ms

fwgbg001#

fw01# ping x.x.x.x

x.x.x.x response received -- 0ms

x.x.x.x response received -- 0ms

x.x.x.x response received -- 0ms

fw01#

1 ACCEPTED SOLUTION

Accepted Solutions

Re: PIX 515E arp problem

1 REPLY

Re: PIX 515E arp problem

729
Views
0
Helpful
1
Replies
CreatePlease to create content