possible Xlate problem?

[tmcmillion]

I am troubleshooting a socket closed problem between a windows nt server in my dmz that frontends access to an as400 that sits inside. My question is about the behavior of some translations on the firewall. When I 'sh xlate', I have a global and local entry with the same address. Is this normal? I have provided the output for sh xlate for this device, the question is on the second entry.

Global orderpowergw Local orderpowerin

Global orderpowerin Local orderpowerin

orderpowergw is the dmz address and orderpower in is inside.

Thank You in advance for your input.

[ehirsel]

It is normal to see multiple xlate entries for the same ip address, when you have a static (dmz,outside) entry for the dmz host and that same host can initiate inbound connections to inside devices - which is what your win nt server does to the as400. One xlate is for dmz-to-outside and the other is for dmz-to-inside.

I hope this helps.