router 877w + pix 501 + problem

[medolago.g]

from my router I can ping internet, from PIX and from my ethernet I can't

I have a pool of public IP,one of this is on the interface Vlan1 of router, another is on the outside of PIX

from PIX I can ping the Vlan1 of router but not internet

ROUTER

interface ATM0

description adsl (Net Ride Adsl)

no ip address

no ip route-cache cef

no ip route-cache

no ip mroute-cache

no atm ilmi-keepalive

dsl operating-mode aut

interface ATM0.1 point-to-point

ip address 151.5.134.38 255.255.255.255

no ip route-cache

no ip mroute-cache

pvc 8/35

oam-pvc manage

oam retry 3 3 3

encapsulation aal5snap

interface Vlan1

ip address xxx.xxx.xxx.66 255.255.255.240

ip classless

ip route 0.0.0.0 0.0.0.0 ATM0.1

PIX

ip address outside xxx.xxx.xxx.67 255.255.255.240

ip address inside 172.20.0.19 255.255.0.0

global (outside) 1 xxx.xxx.xxx.68-xxx.xxx.xxx.78

nat (inside) 1 0.0.0.0 0.0.0.0 0 0

route outside 0.0.0.0 0.0.0.0 xxx.xxx.xxx.66 1

can you help me? thanks

[atif.awan]

Try doing an extended ping from your router with int vlan 1 as the source address. If that is not successful then we know where the problem is but if that is successful we can move in other troubleshooting directions.

By the way in your PIX config it will be wiser to have one entry for PAT in case your pool becomes exhausted. You can do that in the following manner:

global (outside) 1 xxx.xxx.xxx.68-xxx.xxx.xxx.77

global (outside) 1 xxx.xxx.xxx.78

[medolago.g]

I tried the extended ping with Vlan1 as source address and the result is not successful

[atif.awan · Accepted solution]

You will have to check with your provider as I strongly suspect that they do not have a route pointing back to your public pool.

[medolago.g]

I have contacted the provider and the problem was just that one, now I can reach internet from Vlan1

thank you very much