Why is your firewall seeing traffinc from 3.3.3.1. All traffic should be presented to your firewall as 4.4.4.4, unless your source nat is screwed up or unless the default gateway for your DMZ host is pointing to an interface on the firewall and not the actual CSS.
-- Regards, Jason Plank CCIE #16560 e: [EMAIL PROTECTED] -------------- Original message ---------------------- From: "doug schmidt" <[EMAIL PROTECTED]> > hi all, > Im trying to setup a new load balanced site. Its been a long day, and > not sure if Im missing something. > dmz is new network on pix, other load balanced sites are working under > different setup. > > Basically, I have client web request coming from 1.1.1.1 > web site public ip is 2.2.2.2 > pix maps 2.2.2.2 to css vip 4.4.4.4 > > pix > 2.2.2.x - outside > 3.3.3.x - dmz > 4.4.4.x - inside > > css vip 4.4.4.4 > server1 - 3.3.3.1 > server2 - 3.3.3.2 > > this is the message I get from pix when going to the site; > 305006: regular translation creation failed for tcp src > inside:1.1.1.1/3260 dst dmz:3.3.3.1/80 > > thanks. > ~doug > _______________________________________________ > cisco-nsp mailing list [email protected] > https://puck.nether.net/mailman/listinfo/cisco-nsp > archive at http://puck.nether.net/pipermail/cisco-nsp/ _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
