Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

clear xlate

For a couple of times we had to clear xlate for a particular machine on FWSM.

Background:

1.Server is able to ping till the interface ip of the FWSM.

2.Server is not able to connect on any port to ohter servers in other VLANS.

Appreciate your help on this.

2 REPLIES
Anonymous
N/A

Re: clear xlate

There are some NAT commands that are involved in an access-list change, like NAT0ACL and policy NAT. In these 2 cases, a change in the access-lists implicitly changes the rules of the NAT, and a 'clear xlate' is required. Refer usage guidelines of http://www.cisco.com/en/US/docs/security/fwsm/fwsm22/command/reference/c.html#wp1217767. Generally this can also happen when the ip addresses are not available for translation. If this is the case you can consider implementing PAT.

New Member

Re: clear xlate

clear xlate normally require when there is no further IPs are left for translation between private and public IP.you can reduce the refreash time . I guess bydefault it is 3 days.

246
Views
0
Helpful
2
Replies