Could you verify if the error mesage is "%PIX-1-107002". If that is true, this could mean a lot of things... a bug, a malformed entry, an attack or a non standard packet format. The fact that all was well and this error started appearing suddenly, makes the likelihood of an IOS error likely. Try reloading the IOS on your boxes.. especially the one from which the update is expected to be coming. You should probably also verify that the RIP version is consistant throughout.
Yes indeed it is error 107002. We did the usual reboot of routers and the
pix (even the switch)- and the error message kept reappearing. Disabling RIP and using static routes in the PIX has eliminated the problem or at least the error message (our vendor in fact suggested that this is more secure).
But we are still puzzled about such an occurence as there were no version
upgrades on the IOSes and RIPv2 is also consistent across. When using DEBUG RIP / SH ROUTE - it indeed showed that the pix was not updating its routing table. All neighboring external networks are "friendly" and we are using IOS 12.0 for the routers and Cisco Pix 6.2(2). The network traffic to the PIX is minimal so we ruled out any overloading.
Any insights/comments will surely be useful. Tks and regards.
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
Table of Contents Introduction:This document describes details on how
NAT-T works. Background: ESP encrypts all critical information,
encapsulating the entire inner TCP/UDP datagram within an ESP header.
ESP is an IP protocol in the same sense that TCP an...