Hello all,
Seeing if anyone may have an idea on this.
I have two PIX 515e's (yes they are old, but they work) in a FailOver Setup.
Primary PIX is online, FO PIX is in standby. Traffic coming into our network is working fine, Internal to External IP translation is working fine.
I turn off Primary PIX, it Fails to the standby unit, all good and working fine still. No issues.
I replace the Primary PIX with a PIX we had in the position before (So I know it is correct with license and configuration).
Turn the new PIX on, it comes up, connects to the mate and pulls the replication over from the standby unit.
Problem is that when you attempt to use a server with a statically assigned Ext. IP Address and go to Google, then it doesn't work.
If I use another server that is not statically translated, but just overloading on the primary interface, then I can get to Google.
Inbound traffic to our webservers does not work, since they are statically translated.
Tried a few things, couldn't get it to work.
So I removed that PIX and put the one that was in there back in place.
Again unit comes up, connects to standby unit and replicates the information over.
No for the most part it works as it should, both dynamic address translations, and the static translations.
However I have one server that I have 3 internal IPs assigned to the NIC.
one primary and two secondary IPs.
Each of these private IPs is statically defined to a Public IP on the PIX.
Before I made the change with the firewalls, it worked fine.
But now putting it back to the way it was, the primary IP of the server and External IP work fine
The secondary IP and it's mapped External IP do not work. When I make a connection that using the DNS name we have set up for it and watch the log, the PIX shows nothing going towards that IP.
If I remap the secondary IP address to a different External IP, then it works.
So it is like the Ext. IP is hung up somewhere??
I have power cycled both Firewalls, all the associated swtiches I have in place.
As well as the server.
Anyone have any ideas?
