IP addresses go stale

[csi-tacoma]

Every once and a while a user will be unable to get past the PIX firewall. They can reach all of the internal resources- shared drive, exchange server, printers, but no internet. If I change there IP address to a static one, they can reach the outside world again (until that one goes bad). When IP goes bad, I can't ping anything on the outside, so I don't think it's the DNS. I can even transfer the bad IP to another machine (statically) and the IP still does not work properly. So it’s not the NIC card. Everything points to the PIX. Has any one had this problem before?

Any suggestions on where to start trouble shooting would be appreciated!

Chris

[Georg Pauwen]

Hello Chris,

you might want to check this document:

Poor or Intermittent FTP/HTTP Performance Through a PIX

http://www.cisco.com/en/US/partner/products/hw/vpndevc/ps2030/products_tech_note09186a0080094459.shtml

Also, which software version are you running on your PIX ?

Regards,

GP

[csi-tacoma]

Thanks for the reply. My PIX version is 6.2(2).

Chris

[mhussein]

Hello Chris,

Could you post the pix configs? (remember to remove/mask public ip addresses or any other sesnsitive info).

I was wondering, how many global ip addresses are assigned? Is PAT enabled?

Regards,

Mustafa