Problem is still persists..getting panic as the users are unable to connect from 10's other network with ID tag 4 in the configuration mentioned earlier.
HELP.. >From: "Greg Owens Jr" >To: "'Danial Morison'" , >Subject: RE: PIX 520 Xlate Problem [7:63087] >Date: Sat, 15 Feb 2003 08:48:09 -0500 > > > >U may want to change your xlate timeout >-----Original Message----- >From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of >Danial Morison >Sent: Saturday, February 15, 2003 2:58 AM >To: [EMAIL PROTECTED] >Subject: PIX 520 Xlate Problem [7:63087] > >Hi group , > >Any idea where the problem is..thanks.. > > > We have implemented PIX with the following configuration.We have a 3 >inside networks mapped with 2 different public IP pools 203.125.152.0/26 >and > >203.125.150.0/24.Problem is the inside network 10.0.0.0/17(10.0.0.0 subnet >mask 255.255.128.0) is not able to go to internet after a certain period of >time ( 2 or 3 days). > >Any idea where the problem is..thanks.. > >172.0.0.0/8 > >10.0.0.0/8 > >10.0.0.0/17 > >Here are the details. > >pixfirewall# sh global > >global (outside) 1 203.125.152.194-203.125.152.236 netmask 255.255.255.192 > >global (outside) 4 203.125.150.1-203.125.150.126 netmask 255.255.255.128 > >global (outside) 2 203.125.152.244 netmask 255.255.255.192 > >global (outside) 3 203.125.152.248 netmask 255.255.255.192 > >global (outside) 1 203.125.152.193 netmask 255.255.255.192 > >global (outside) 4 203.125.150.249 netmask 255.255.255.128 > >global (dmz) 1 172.16.13.11-172.16.13.20 netmask 255.255.255.0 > >global (dmz) 2 172.16.13.51-172.16.13.60 netmask 255.255.255.0 > >global (dmz) 3 172.16.13.61-172.16.13.70 netmask 255.255.255.0 > >global (dmz) 4 172.16.13.71-172.16.13.80 netmask 255.255.255.0 > >global (dmz) 1 172.16.13.10 netmask 255.255.255.0 > >global (dmz) 2 172.16.13.9 netmask 255.255.255.0 > >global (dmz) 3 172.16.13.8 netmask 255.255.255.0 > >global (dmz) 4 172.16.13.6 netmask 255.255.255.0 > >pixfirewall# sh nat > >nat (inside) 2 172.16.1.115 255.255.255.255 0 0 > >nat (inside) 3 172.16.11.76 255.255.255.255 0 0 > >nat (inside) 3 172.16.11.80 255.255.255.255 0 0 > >nat (inside) 3 172.16.11.84 255.255.255.255 0 0 > >nat (inside) 2 172.16.11.224 255.255.255.240 0 0 > >nat (inside) 4 10.0.0.0 255.255.128.0 0 0 > >nat (inside) 1 10.0.0.0 255.0.0.0 0 0 > >nat (inside) 1 172.0.0.0 255.0.0.0 0 0 > >nat (dmz) 1 172.16.13.0 255.255.255.0 0 0 > >pixfirewall# sh xlate > >Global 203.125.152.220 Local 172.16.11.71 > >Global 203.125.152.221 Local 172.16.11.149 > >Global 172.16.13.11 Local 172.16.11.139 > >PAT Global 203.125.152.193(52641) Local 172.16.11.57(1155) > >Global 203.125.152.222 Local 172.16.11.120 > >Global 203.125.152.223 Local 172.16.152.37 > >Global 203.125.152.216 Local 172.17.1.94 > >Global 203.125.152.217 Local 172.16.1.20 > >Global 203.125.152.218 Local 172.16.5.20 > >Global 172.16.13.12 Local 172.16.1.205 > >Global 203.125.152.219 Local 172.16.11.139 > >Global 172.16.13.13 Local 172.16.154.75 > >Global 203.125.152.212 Local 172.16.11.194 > >Global 203.125.152.213 Local 172.17.11.91 > >Global 203.125.152.214 Local 172.17.1.91 > >Global 203.125.152.215 Local 172.16.5.78 > >Global 203.125.152.208 Local 172.16.1.22 > >Global 203.125.152.209 Local 172.16.5.15 > >Global 203.125.152.210 Local 172.16.151.75 > >Global 203.125.152.211 Local 172.17.1.23 > >Global 203.125.152.204 Local 172.16.5.79 > >Global 203.125.152.205 Local 172.16.5.13 > >PAT Global 203.125.152.193(52640) Local 172.16.11.57(1154) > >Global 203.125.152.206 Local 172.18.1.22 > >Global 203.125.152.207 Local 172.18.1.104 > >Global 203.125.152.200 Local 172.16.11.192 > >Global 203.125.152.201 Local 172.18.1.24 > >Global 203.125.152.203 Local 172.16.5.17 > >PAT Global 172.16.13.6(43713) Local 10.0.12.137(12875) > >Global 203.125.152.203 Local 172.16.151.72 > >Global 203.125.152.196 Local 172.16.5.21 > >Global 203.125.152.197 Local 10.120.10.51 > >Global 172.16.13.19 Local 172.18.1.254 > >Global 203.125.152.198 Local 172.17.1.93 > >Global 203.125.152.199 Local 172.16.11.186 > >Global 203.125.150.193 Local 172.16.206.30 static > >PAT Global 203.125.152.244(21827) Local 172.16.11.233(4493) > >PAT Global 203.125.152.244(21811) Local 172.16.11.233(4480) > >Global 203.125.152.194 Local 172.16.5.18 > >Global 172.16.13.20 Local 172.17.1.110 > >Global 203.125.152.195 Local 172.16.5.14 > >Global 203.125.150.252 Local 172.16.1.40 static > >Global 203.125.152.252 Local 172.16.13.21 static > >Global 172.16.13.42 Local 172.18.1.22 static > >Global 172.16.13.43 Local 172.17.1.21 static > >PAT Global 203.125.152.193(52643) Local 172.16.11.57(1158) > >Global 172.16.13.40 Local 172.16.11.21 static > >Global 172.16.13.41 Local 172.16.206.21 static > >Global 203.125.150.249 Local 172.16.13.27 static > >Global 203.125.152.249 Local 172.16.13.23 static > >Global 172.16.13.47 Local 10.160.10.53 static > >Global 203.125.152.250 Local 172.16.1.41 static > >Global 203.125.150.250 Local 172.16.1.24 static > >PAT Global 172.16.13.6(43714) Local 10.0.12.140(14384) > >Global 172.16.13.44 Local 172.16.152.21 static > >Global 203.125.152.251 Local 172.16.13.22 static > >Global 172.16.13.45 Local 10.160.10.51 static > >Global 203.125.152.245 Local 10.160.10.51 static > >Global 203.125.152.246 Local 172.16.13.26 static > >Global 203.125.152.247 Local 172.16.13.25 static > >Global 203.125.152.240 Local 10.160.10.52 static > >Global 203.125.152.241 Local 172.16.18.51 static > >PAT Global 203.125.152.244(22080) Local 172.16.11.229(1026) > >PAT Global 203.125.152.244(21856) Local 172.16.11.224(1473) > >Global 203.125.152.242 Local 172.16.206.31 static > >Global 203.125.152.243 Local 172.16.206.21 static > >Global 203.125.152.236 Local 172.16.1.25 > >PAT Global 203.125.152.193(52642) Local 172.16.11.57(1157) > >PAT Global 203.125.152.193(52626) Local 172.16.11.57(1135) > >Global 203.125.152.232 Local 172.16.155.85 > >Global 203.125.152.233 Local 172.17.1.21 > >Global 203.125.152.234 Local 172.16.5.75 > >PAT Global 172.16.13.6(43715) Local 10.0.12.142(14931) > >Global 203.125.152.235 Local 172.17.1.92 > >Global 203.125.152.228 Local 172.16.11.124 > >Global 203.125.152.229 Local 172.16.1.26 > >Global 203.125.152.230 Local 172.16.5.80 > >Global 203.125.152.231 Local 172.16.11.21 > >Global 203.125.152.224 Local 172.16.5.16 > >Global 203.125.152.225 Local 172.16.11.196 > >PAT Global 203.125.152.244(22081) Local 172.16.11.233(4546) > >Global 203.125.152.226 Local 172.16.1.102 > >Global 203.125.152.227 Local 172.16.152.32 > >Global 172.16.13.74 Local 10.0.12.76 > >Global 172.16.13.75 Local 10.0.12.80 > >PAT Global 203.125.152.193(52645) Local 172.16.11.57(1160) > >PAT Global 203.125.152.193(52629) Local 172.16.11.57(1138) > >Global 172.16.13.72 Local 10.0.12.71 > >Global 172.16.13.73 Local 10.0.12.73 > >Global 172.16.13.78 Local 10.0.12.83 > >Global 172.16.13.79 Local 10.0.12.67 > >PAT Global 172.16.13.6(43716) Local 10.0.12.143(3744) > >Global 172.16.13.76 Local 10.0.11.242 > >Global 172.16.13.77 Local 10.0.12.82 > >PAT Global 203.125.152.244(22054) Local 172.16.11.224(1675) > >Global 172.16.13.71 Local 10.0.12.70 > >PAT Global 203.125.152.193(52644) Local 172.16.11.57(1159) > >PAT Global 172.16.13.6(43717) Local 10.0.12.144(50265) > >Global 203.135.39.36 Local 172.16.1.34 static > >Global 203.135.39.37 Local 172.16.1.32 static > >Global 172.16.13.80 Local 10.0.12.69 > >PAT Global 203.125.152.193(52647) Local 172.16.11.57(1162) > >PAT Global 203.125.152.193(52631) Local 172.16.11.57(1140) > >PAT Global 203.125.152.193(52646) Local 172.16.11.57(1161) > >PAT Global 203.125.152.193(52630) Local 172.16.11.57(1139) > >PAT Global 203.125.152.248(50501) Local 172.16.11.76(1030) > >PAT Global 203.125.152.193(52649) Local 172.16.11.57(1164) > >PAT Global 203.125.152.193(52633) Local 172.16.11.57(1143) > >PAT Global 203.125.152.193(52648) Local 172.16.11.57(1163) > >PAT Global 203.125.152.193(52632) Local 172.16.11.57(1141) > >PAT Global 203.125.152.193(52651) Local 172.16.11.57(1167) > >PAT Global 203.125.152.193(52635) Local 172.16.11.57(1148) > >PAT Global 203.125.152.193(52603) Local 172.18.1.100(1912) > >PAT Global 203.125.152.193(52491) Local 172.16.11.206(1047) > >Global 203.135.6.212 Local 172.16.1.31 static > >Global 203.135.6.214 Local 172.16.1.205 static > >Global 203.135.6.215 Local 172.16.1.50 static > >Global 203.135.6.211 Local 172.16.1.64 static > >PAT Global 203.125.152.193(52650) Local 172.16.11.57(1165) > >PAT Global 203.125.152.193(52634) Local 172.16.11.57(1145) > >PAT Global 203.125.152.193(52618) Local 172.16.11.57(1126) > >PAT Global 203.125.152.193(52653) Local 172.16.11.57(1170) > >PAT Global 203.125.152.193(52637) Local 172.16.11.57(1150) > >Global 203.125.150.31 Local 10.0.12.139 > >PAT Global 203.125.152.193(52652) Local 172.16.11.57(1168) > >PAT Global 203.125.152.193(52636) Local 172.16.11.57(1149) > >PAT Global 203.125.152.244(22079) Local 172.16.11.233(4544) > >PAT Global 203.125.152.193(52655) Local 172.16.11.57(1172) > >PAT Global 203.125.152.193(52639) Local 172.16.11.57(1152) > >PAT Global 203.125.152.193(52654) Local 172.16.11.57(1171) > >PAT Global 203.125.152.193(52638) Local 172.16.11.57(1151) > >pixfirewall# > > > > > >_________________________________________________________________ >Fe Hotmail pe mobilen http://www.msn.dk/mobile i, _________________________________________________________________ Tag din Hotmail med dig, ner du ger http://www.msn.dk/mobile Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=65577&t=63087 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
