I guess I should follow up with the solution. 
Sorry, it's been a long day.

The short term soulution was to set up a cron job to
test the link every 5 minutes, and issue a 'clear ip nat trans *'
to the router if the link was down. 
The long term solution was to upgrade to IOS v12.0(5.5)T, (v12.0.3T
did not fix the bug on my 2611)
YMMV

Robert

> You've hit on a bug in older versions of IOS's NAT.
> If you 'clear ip nat translations *', the inbound
> NAT will start working again. It has to do with the
> NAT timeout value(default is 24 hours), and poor
> memory managment in IOS v11.x
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]

Reply via email to