no translation group found

[pylon]

Just added another network internal to PIX via multiple routers. Remote network can reach PIX inside interface via ICMP. However, remote network cannot get to the Internet pass PIX. PIX is returning error "no translation group found". Remote network is 10.1.64.0 255.255.224. NAT statement is 10.1.0.0 Route inside is 10.1.31.254 to the host router feeding the T1 to the remote network. I'm certain this is a configuration issue on the PIX but I can't put my finger on it.

[jekrauss]

Actually, you've isolated the cause correctly - you don't have the pix properly configured for a translation for this subnet.

You need to be a little more specific about your nat statement for us to be sure that it's correct. Also, that nat statement has to map to a global (assuming that you are actually nat'ing) on the outbound interface.

i.e. If you are going to 198.133.219.25, then whatever interface the pix thinks that network can be found (default route to the outside, for instance), then you need a matching global for your internal nat.

i.e. something like:

nat (inside) 1 10.1.64.0 255.255.224.0

global (outside) 1

route outside 0.0.0.0 0.0.0.0

Make sure that the host that doesn't have a translation actually falls within the remote network/subnet mask you've specified (10.1.64.0 - 10.1.95.255).

HTH

Jeff