Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

connection status keep SaAB until goes down

i've two pix 535 (ver.6.3) in failover.

i've a client in the outside who ask to a server in DMZ a service with protocol tcp port 3000.

i've a static translation for the server and the rule from outside to dmz and to dmz to ouside.

i've also tried to open all adding a rule with IP from outside any to server in DMZ.

everytime when i make a sh conn the reault is

TCP ..... flags SaAB

never goes to UIO

does it mean that the server is not responding?

the server give the same services to client in inside and is working proprely!

pls help me!!

1 REPLY
Gold

Re: connection status keep SaAB until goes down

post the related config, including nat/global, static, and inbound acl.

e.g.

static (dmz,outside) tcp interface 3000 3000 netmask 255.255.255.255

access-list inbound permit tcp any interface outside eq 3000

access-group inbound in interface outside

315
Views
0
Helpful
1
Replies
CreatePlease to create content