PIX NAT/PAT problem

[s.vidanovic]

I have configured NAT (range) on PIX, and everything was OK. Sudendly, my inside clients could not go outside. I have no restriction for inside users going outside. If I use PAT, still does not work. If I use PAT with PIX outside interface, everything is OK. Any ideas? I tried to connect one laptop between PIX and ISP router with one IP adrress from NAT range, no problem. In syslog I see that PIX biult translation, built outgoing connection, but no return traffic. I say again, this happened sudendly.

Sasa

[rrbleeker]

Based on your information it is hard to pinpoint the cause of the problem. I would concentrate on the communication between the PIX and the upstream router. Check the MAC addresses for your NAT/PAT pool first.

[turnbull]

Check the netmask in the global matches the outside interface.

Or, if the global needs to use a different netmask, ensure upstream router has appropriate route back for a non connected subnet.

Globals default to classful.