Pix 515 Xlate problem

[mwarwick]

I have 2 Pix 515 firewalls running Version 5.2 (1).

I have put identical simple configurations on both.

One of the Firewalls works fine allowing traffic in and out of both interfaces. Both E1 and E0 ip addresses can be pinged.

The problem is with the second. When wired to the network it will not allow any connections in or out and neither of the Ip's can be pinged.

On Firewall 1, the command 'SHOW XLATE'returns 2 global statements,

On Firewall 2, the 'SHOW XLATE' Command returns nothing.

Bearing in mind that the Firewalls have identical configs on them I am not sure what is causing the problem.

[rrbleeker]

The problem might not be the firewalls, but the routers the firewalls connect to. The might still use the 'old' MAC address to communicate with the firewall.

[c.reglat]

HI,

First you might want to use a clear xlate command to clear all translation on the firewall. If it doesn't do it make sure you have your global in. Look like your firewall is not translating.

Hope it help.

You can send me your config i'll be more than happy to help if I can