PIX dropping untagged vlan packets

[bruce.l.williams]

I have a PIX 515 running 7.0 connected to a 3750 switchport that is mapped to a primary and a community private vlan. I have ICMP allowed through the PIX for troubleshooting. When I ping through the PIX or to the PIX, about half of the packets are dropped. Under show interface of the pix outside interface, it says "dropped 3 untagged vlan packets". What is causing this?

[vasthorvak]

can you try this exercise again while running a debug icmp trace from the pix and then past the results? Thanks.

[fedrodri]

Hi, Bruce

I believe that the "untagged vlan packets" is just a misleading information on the 'show int' output under version 7.0. You should better try the 'show asp drop' command for better understanding of the dropped packets or flows.

Hope that helps!

Federico Rodriguez