"no translation group found"-help

[leeb]

i have pix 6.3.

i have an outside and an inside int.

my inside network has public ip's so it does nat 0.

there is one pc in the inside that has access from the internet, the problem is that often the connection to this pc from outside is not accessible and i get the error "no translation group found"- when i restart the pix the problem is gone until next time. all this time the pc is up and no configuraion changes made.what is the problem???

[mostiguy]

what does your nat 0 statement look like? if it does not involve an access-list, then your problem is likely that there is not an existing translation slot for the outside host to make an inbound connection to.

[leeb]

"access-list outside_access_in permit icmp any any "

"nat (inside) 0 0.0.0.0 0.0.0.0 0 0"

i have those configured and i can usualy ping the problematic statiion from the outside until i get requst time out and i see in log the error messege abovw..any idea?

[sachin]

You should define static statements for each pubic ip eventhough you are using public ip on inside interface like -

static (inside,outside) 203.199.18.196 203.199.18.196 netmask 255.255.255.255

and correspondingly you have to open port by access-list for that IP.