Cannot connect to same DMZ servers, strange problem...

[arifkhan]

Hi.. All,

Using Cisco 2590 Switch (Dedicated to below mentioned DMZ)

Setup = Checkpoint Firewall NG with Stonebeat Cluster.

I am finding something strange problem in one of My DMZ where I used all the legal IP address block. I use my proxy servers and smtp servers in this DMZ. when I am telnet from my proxy servers to smtp server or vice-versa which are there in the same DMZ Net with the legal IP address it is not connecting and also there are no logs in firewall.

Any clue where the packet is missing or any good tool to find out or it is not possible to start any connection between servers in the same DMZ.

I check with one of my support company, they answer very strange thing that it is not possible to start any conversation between same DMZ servers.

Note : There is no PVLAN kind of thing in this setup.

[sachinraja]

When your servers are on the same DMZ, the packet will never reach the PIX interface. It should be a problem with the local connectivity.

Check if the switchports connected to these servers are in the same VLAN.

Are you able to ping the servers from each other or is the telnet only not happening ?

Cheers