topic Re: pix connection troubleshooting in Network Security

pix connection troubleshooting

jawwalit — Fri, 21 Feb 2020 08:00:35 GMT

hi all,

i have a problem that my outside customer with real ip address (x.x.x.x) cant access a specific services that have a port (Y.Y) how can debug this isuue without make a heavy load in my pix

regards

Re: pix connection troubleshooting

sachinraja — Mon, 14 Mar 2005 11:02:13 GMT

Hi,

are all the ip addresses from outside not able to access the port Y.Y or only one IP x.x.x.x ?? what are the rules applied on the outside interface ? please make sure you have appropriate rules. elaborate more or paste configs of outisde access rules if more help is required from our side

Raj

Re: pix connection troubleshooting

jawwalit — Mon, 14 Mar 2005 11:42:32 GMT

let take its as general problem how can i debug this problem?

thanks

Re: pix connection troubleshooting

sachinraja — Mon, 14 Mar 2005 13:37:17 GMT

helllo

you can use specific debugs and try resolving the problem..

debug packet if_name [src source_ip [netmask mask]] [dst dest_ip [netmask mask]] [[proto icmp] | [proto tcp [sport src_port] [dport dest_port]] | [proto udp [sport src_port] [dport dest_port]] [rx | tx | both]

eg. debug packet outside src x.x.x.x dst Y.Y

This will show you all connections from source x.x.x.x to destination Y.Y.. be very careful when turning on this debug. if there is too much of traffic between these IPs, it might be a problem.

hope this helps..

Raj