PIX causing loss of connectivity?

[mtaloyd18]

Every day or two I lose my interent connection and all I have to do is reset the power on my PIX to get it back. Can someone explain what is going on?

[cpembleton]

What model pix are you using? What license do you have? How many IP's are in your nat/pat pool? How many clients are behind the pix?

Thanks,

Chad

[mtaloyd18]

515, not sure what u mean by license (it's a fairly old PIX), I have about 40-45 IP's in NAT, 40-45 clients.

Nothing fancy just setup to allow local traffic with a small DMZ for web and mail servers.

[cpembleton]

You say about 40-45 nat ip's and clients. Are there more clients then ip's? Do you have nat overload configured. The license controls which features you have. For example, if you had a 501 restriceted this would be a problem.

Say you have 40 ip's in NAT and 41 pc's. All tried to connect then the 41st would not be able to until the xlate time out and freed an IP. With nat overload (PAT) this would take care of this issue. See link.

http://www.cisco.com/en/US/customer/products/hw/vpndevc/ps2030/products_tech_note09186a00800b6e1a.shtml#mixing_nat

Do 'show xlate' when you have the problem. It will show the translations in use.

Thanks,

Chad