Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

router 877w + pix 501 + problem

from my router I can ping internet, from PIX and from my ethernet I can't

I have a pool of public IP,one of this is on the interface Vlan1 of router, another is on the outside of PIX

from PIX I can ping the Vlan1 of router but not internet

ROUTER

interface ATM0

description adsl (Net Ride Adsl)

no ip address

no ip route-cache cef

no ip route-cache

no ip mroute-cache

no atm ilmi-keepalive

dsl operating-mode aut

interface ATM0.1 point-to-point

ip address 151.5.134.38 255.255.255.255

no ip route-cache

no ip mroute-cache

pvc 8/35

oam-pvc manage

oam retry 3 3 3

encapsulation aal5snap

interface Vlan1

ip address xxx.xxx.xxx.66 255.255.255.240

ip classless

ip route 0.0.0.0 0.0.0.0 ATM0.1

PIX

ip address outside xxx.xxx.xxx.67 255.255.255.240

ip address inside 172.20.0.19 255.255.0.0

global (outside) 1 xxx.xxx.xxx.68-xxx.xxx.xxx.78

nat (inside) 1 0.0.0.0 0.0.0.0 0 0

route outside 0.0.0.0 0.0.0.0 xxx.xxx.xxx.66 1

can you help me? thanks

1 ACCEPTED SOLUTION

Accepted Solutions
Silver

Re: router 877w + pix 501 + problem

You will have to check with your provider as I strongly suspect that they do not have a route pointing back to your public pool.

4 REPLIES
Silver

Re: router 877w + pix 501 + problem

Try doing an extended ping from your router with int vlan 1 as the source address. If that is not successful then we know where the problem is but if that is successful we can move in other troubleshooting directions.

By the way in your PIX config it will be wiser to have one entry for PAT in case your pool becomes exhausted. You can do that in the following manner:

global (outside) 1 xxx.xxx.xxx.68-xxx.xxx.xxx.77

global (outside) 1 xxx.xxx.xxx.78

New Member

Re: router 877w + pix 501 + problem

I tried the extended ping with Vlan1 as source address and the result is not successful

Silver

Re: router 877w + pix 501 + problem

You will have to check with your provider as I strongly suspect that they do not have a route pointing back to your public pool.

New Member

Re: router 877w + pix 501 + problem

I have contacted the provider and the problem was just that one, now I can reach internet from Vlan1

thank you very much

109
Views
0
Helpful
4
Replies