Strange syslog error message, devices appear reversed

[alitster]

Hi,

I keep on getting a lot of these syslog error messages.

No translation group found for udp src dmz2:REMOTE_HOST/5060 dst outside:DMZ_HOST/5060

Which doesn't quite make sense as the DMZ_HOST is infact on the DMZ2, a SIP Proxy Server, and the REMOTE_HOST is on the outside interface, a SIP gateway, which is in a different country.

Cisco PIX Firewall Version 6.2(2)

Cisco PIX Device Manager Version 2.1(1)

Compiled on Fri 07-Jun-02 17:49 by morlee

pix-uk0 up 1 hour 54 mins

Hardware: PIX-515E, 64 MB RAM, CPU Pentium II 433 MHz

Flash E28F128J3 @ 0x300, 16MB

BIOS Flash AM29F400B @ 0xfffd8000, 32KB

Is this a problem with the PIX? Or could it infact be a bug in the SIP proxy software we are using?

Regards,

Alan

[mhoda]

Alan,

Seems like a config issue. For further troubleshooting, please give us the snippet of the nat config with changing ip (for security reason), or open up a TAC case. Thanks, Mynul

[alitster]

Hi Mynul,

DMZ2 is using public addresses that are made available to the outside via a static

access-list nonat_dmz2 permit ip 2.2.2.80 255.255.255.240 192.168.0.0 255.255.255.0

global (outside) 1 1.1.1.69-1.1.1.71

global (outside) 1 1.1.1.72

nat (inside) 0 access-list nonat_inside

nat (inside) 1 10.0.0.0 255.0.0.0 0 0

nat (dmz2) 0 access-list nonat_dmz2

static (dmz2,outside) 2.2.2.80 2.2.2.80 netmask 255.255.255.240 0 0

DMZ2 is on 2.2.2.80/24

It appears to be working, I'm just curious as to why these messages are being generated - that and the problem of the PIX rebooting every so often. It rebooted by it's self again, this time only up for about 6hrs.

Regards,

Alan

[mhoda]

Alan,

Without further delay, I would suggest you to open up a TAC case. Thanks,

Mynul

[alitster]

OK, I will do.

Thanks for your help Mynul.

Regards,

Alan