Migrating web servers from pix outside to dmz segment

[wanghmk1223]

Hi,

I have this issue:

When I migrate a web server using public ip (pix outside segment) to pix dmz segment, though i have a correct static mapping and access-list defined, i just can't get it work. But if the statically assign public ip is different (not in use before), it works.

Suspect Problem:

- arp table at external router not updated.

is my guess right?

Do i need to perform a clear arp at the router before i move the web server from pix outside to the dmz segment?

Any advise?

[pavlosd]

Well, is always advisable when making a change on the PIX firewall to clear or static translations.

Now, if you had a static translation with a public IP address that has been used, then you might need to clear the xlate (translation) table.

You can always try it....

[a.awan]

Yes i believe the arp cache on the router is the exact problem you are facing. Clear the arp and then try.