We switched over to a new range of external IP addresses yesterday. About half our workstations cannot access the internet at all. I can ping the PIX but not the router that the PIX routes them to. If I reboot the PIX and router some people start working but others that were working then cannot access anything. I am thinking it may have something to do with NAT and the PIX not releasing external IP's or something?? BTW I have gone through the config line by line and nothing has changed except the IP's and static routes that had to change. We are on PIX version 4.1(5) and the router is a 2500....(I know its old stuff). If you have ANY ideas or suggestions please post or email....Thanks
I highly recommend upgrading to the latest Pix firmware if the hardware requirements are met. Without seeing the config it's hard to tell. I would make sure that the GLOBAL command has the new IP range also. Did you do a CLEAR XLAT command after changing the NAT settings?
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
[toc:faq]Introduction:This document describes details on how NAT-T
works.Background:ESP encrypts all critical information, encapsulating
the entire inner TCP/UDP datagram within an ESP header. ESP is an IP
protocol in the same sense that TCP and UDP are I...