Static NAT doesn't works correctly

[dgnaccar]

I have a problem with ths config:

global (outside) 1 194.94.76.58

nat (inside) 1 200.100.0.0 255.255.255.0 0 0

static (inside,outside) 194.94.76.60 200.100.0.1 netmask 255.255.255.255 0 0

static (inside,outside) 194.94.76.62 200.100.0.4 netmask 255.255.255.255 0 0

static (inside,outside) 194.94.76.61 200.100.0.3 netmask 255.255.255.255 0 0

conduit permit tcp host 194.94.76.60 eq smtp any

conduit permit tcp host 194.94.76.60 eq www any

conduit permit tcp host 194.94.76.60 eq 2080 any

conduit permit tcp host 194.94.76.61 eq 1604 any

conduit permit tcp host 194.94.76.60 eq 3270 any

conduit permit tcp host 194.94.76.60 eq 3443 any

conduit permit tcp host 194.94.76.60 eq 4270 any

conduit permit tcp host 194.94.76.61 eq 1494 any

conduit permit tcp host 194.94.76.61 eq www any

conduit permit tcp host 194.94.76.62 eq www any

conduit permit tcp host 194.94.76.62 eq 5631 any

conduit permit udp host 194.94.76.62 eq 5632 any

conduit permit tcp host 194.94.76.62 eq 443 any

The second static (static (inside,outside) 194.94.76.62 200.100.0.4 netmask 255.255.255.255 0 0

) statement does not work. We tried clear xlate, clear arp but didn't work. Could be a NIC problem?

Any idea?

[rrbleeker]

The configuration entries look fine. I would check the server (200.100.0.4) for configuration errors (IP address, mask, default gateway, etc) or connectivity issues. Succes

[jose.calvillo]

I have seen issues in the past wherein the PIX has had major issues when trying to handle classless IP's. Your internal IP addresses have the 3rd octet as 0, thus classless.

Unfortunately I've never found a work around (other then re-ip'ing so the PIX doesn't have to use the classless IP's.)

[johan.blom]

I have almost the same problem after I changed IP, no static lines would work and I checked the config serveral times I also had other people checking it with no luck :(

[dgnaccar]

It was a router arp cache problem. We have reset the router and the PIX accordingly and the problem magicly gone away. Thanks to everyone for your contributions.