Nexus problem

[lethanhtung0131]

Hi,

I have a issue and need advice here:

My network setup

Firewall --> Nexus --> Internet

Firewall outside interface which is connecting to nexus has 1 private IP (192.168.1.20) and a few public IPs (lets say 119.119.119.119 and 119.119.119.120). Issue is sometimes from public can not ping or access the services on both public IPs, unless go in the nexus to ping 192.168.1.20.

I am feeling this is an ARP problem? I check the arp table and the public IP cannot be accessed even though the private IP is in even  the table.

Any thought? thanks

[lethanhtung0131]

Forgot to say, my nexus is 5548, and sometimes the public IP will down and resume by itself, if I want them to up right away, I need to go in Nexus and ping the private IP. 

[Ganesh Hariharan]

Hi,

In your setup Nexus is working in L2 or L3 mode and what is the default route in Firewall.

Can you ping continuously ping default gateway and any public ip from Firewall.

Please share the answers for above query ..

-GI

[lethanhtung0131]

Hi,

Nexus is in layer 3 mode, default gate way of firewall is 192.168.1.1. this switch is connecting to a lot of firewalls and each firewall's outside intf has a IP in 192.168.1.0/24 subnet.

I can ping continuously DG and most of the public IP from firewall. Except for a few with problem above.