Cisco Community
English
Register
Register
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

642
Views
0
Helpful
2
Replies
Tim Miller
Beginner
Beginner
‎10-03-2011 06:52 PM
‎10-03-2011 06:52 PM

PIX 515E failover question

My primary power failed two days ago and I am now only running on failover.  Many of my static translations are no longer working and i cannot figure why since the configuration looks correct and I have confirmed each of my connections are mirrors of my primary.  Should I be concerned since I have lost connectivity in the majority of my apps?

Labels:
0 Helpful
2 REPLIES 2
golly_wog
Beginner
Beginner
‎10-07-2011 10:15 AM
‎10-07-2011 10:15 AM

Hi Tim

Can you post a show run and a show xlate.

Cheers

0 Helpful
Kureli Sankar
Cisco Employee
Cisco Employee
In response to golly_wog
‎10-08-2011 09:58 AM
‎10-08-2011 09:58 AM

Did the mac address change by any chance? On the upstream router if you do a

sh arp | i x.x.x.x  (where x.x.x.x is the outside interface IP)

sh arp | i y.y.y.y  (where y.y.y.y is the IP in the static that doesn't work)

do they both show the same IP or diff. IP? If you see different IP then I can see that being a problem.

Issue "clear arp" on the upstream routers and that should take care of this.

The problem that you are facing is due to this ENH defect:

-Kureli

0 Helpful
Latest Contents
ISE as RADIUS server for Password + Smart Card Authenticatio...
Created by deepuvarghese1 on 04-17-2021 06:22 AM
1
10
1
10
The purpose of this document is to demonstrate how ISE authenticate / authorize a user that uses a smart card (PIN + Certificate) and password mechanism to login their system. This document describes the components used for this setup, configuration of IS... view more
Email Security - QuoVadis Root Certificate Decommission Migh...
Created by dmccabej on 03-30-2021 09:32 AM
0
0
0
0
Problem Description For all versions of the Email Security Appliance (ESA) and Security Management Appliance (SMA), some Secure Sockets Link (SSL) certificates issued from the QuoVadis root certificate authority (CA) trust chain before 2021-03-31 cannot b... view more
ISE REST APIs Webinar: April 6/7, 2021
Created by thomas on 03-25-2021 07:57 PM
2
5
2
5
  Register Now Automation and programmability for networking and security are increasingly important topics. Every release since ISE 1.2 has included new REST API capabilities to better automate and integrate ISE with the rest of your network, appli... view more
FMT 2.3.4 adding ASA migrations of S2S VPN in public beta
Created by William_Hansch on 03-22-2021 08:00 AM
1
10
1
10
The latest iteration (v2.3.4) of the Cisco Secure Firewall Migration Tool adds public beta support for S2S VPN migrations from ASA: Policy-based (crypto map) Pre-Shared key authentication type VPN configuration to Firepower Management Center VP... view more
What's New for Cisco Defense Orchestrator (CDO)
Created by Andrew Mallio on 03-22-2021 04:40 AM
1
40
1
40
Cisco Defense Orchestrator (CDO) is a cloud-based, multi-device manager that manages security products like Adaptive Security Appliance (ASA), Firepower Threat Defense next-generation firewall, and Meraki devices, to name a few.  We make improvement... view more
Content for Community-Ad