can not ping

[iqbalkhan]

Hi

I am facing a piqular problem.

I have 3-4 pix .From inside 3 pix users can ping. but same configure from one pix can not pix.

pix inside 192.168.31.10

pix outside 192.168.50.227/29

router inside 192.168.50.228/29

router outside 192.168.100.3

-------

access-list 101 permit tcp any any

access-list 101 permit icmp any any

nat (inside) 1 0.0.0.0 0.0.0.0 0 0

static (inside,outside) 192.168.50.129 192.168.33.11 netmask 255.255.255.255 0 0

access-group 101 in interface outside

-----------------------

user who have 192.168.33.20 can not ping

192.168.50.228 and 192.168.100.1

but static user 192.168.33.11 can ping.

it is strenge to me.

any solution.

Thanks

Biplob

[aashish.c]

hi

the obvious missing this is "global" statement for inside users.

add a global command :

global(outside) 1 x.x.x.x

i hope this will take care of this issue.

regards

aashish C

[iqbalkhan]

Hi

ok but my other pix work fine without global command.

and as your suzation I add

global (outside) 1 192.168.50.229-192.168.50.230 netmask 255.255.255.255.248

and why I use as it is already use nat ?.

thanks

biplob