With the assumption that all set correctly, nat cooralates to global, etc,
etc.
and you cleared all caches after set up;which I would say somewhere they
are not, I would run icmp debugs, take all acl's off except the one's needed
for
the nat/pat, and watch the packets, you'll find it.

-TV

""Anthony Ramsey""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Hi all,
> I appreciate any feedback to my question:
> I am setting up a lab environment and intially trying
> to configure a router and a pix behind it.
> my router's outside interface is connected to a cable
> modem and have a live ip address assigned to it.
> cable modempix--------> inside
> hosts.
>
> the router's inside interface has a private ip add. of
> 172.16.1.1 /24 and the pix' outside interface is
> 172.161.1.2 /24.  the inside interface of the pix has
> an ip address of 10.1.1.1 /24 and all inside hosts
> have that as the default gateway. securities are set
> up correctly on the inside and outside interfaces.
> I am using a global pat address, different from the
> one on the router's interface connected to the cable
> modem (no statics going on in the pix). i am unable to
> reach the internet even when I use the statement:
> "conduit permit ip any any"  and no packets are able
> to reach the 172.16.1.0 network from the inside hosts
> not even the 172.16.1.2 address which belongs to the
> pix's outside interface.
>  I have a "route outside 0 0 172.16.1.2" statement as
> well.
> from the router I can ping inside hosts, with the
> correct route statement.
>
> hope this is enough information. please help!
> thanks
> Tony
>
>
>
> __________________________________________________
> Do You Yahoo!?
> Yahoo! - Official partner of 2002 FIFA World Cup
> http://fifaworldcup.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=45643&t=45639
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Reply via email to