Velocity Reviews - Computer Hardware Reviews

Velocity Reviews > Newsgroups > Computing > Cisco > Cisco Pix 501 Very Strange issues ! Newbie needs help !!

Reply
Thread Tools

Cisco Pix 501 Very Strange issues ! Newbie needs help !!

 
 
fartblast@googlemail.com
Guest
Posts: n/a
 
      10-04-2006

Hello !


I have a cisco pix 501 using 3des site to site VPN as well as Standard
firewall work,

We have just moved office and are having a very strange problem that
seems to be baffling everyone. we have a 2mb sdsl line from easynet and
we are using a Zyxel 792H router to connect, the next step in the
network is the Pix, everything works fine for 18 - 28 mins then a ping
to our outside IP drops and we loose internet access BUT the VPN stays
Up and connected and e-mail and MSN works fine for another 15 or so
mins then that drops.

Everything from the easynet side has been checked, even the dslam card
has been changed, but we are still having the same issues,

It's been suggested this morning that the NAT buffer on the PIX is
not big enough, but I cannot fine any information on the web about
this,

The PIX was working fine for 2 years in the old office and was carried
over the 500 years to our new office by hand,

If anyone has any ideas it would be a great help, this problem is
driving me mad!


thanks !!

 
Reply With Quote
 
 
 
 
Brian V
Guest
Posts: n/a
 
      10-04-2006

<(E-Mail Removed)> wrote in message
news:(E-Mail Removed) ps.com...
>
> Hello !
>
>
> I have a cisco pix 501 using 3des site to site VPN as well as Standard
> firewall work,
>
> We have just moved office and are having a very strange problem that
> seems to be baffling everyone. we have a 2mb sdsl line from easynet and
> we are using a Zyxel 792H router to connect, the next step in the
> network is the Pix, everything works fine for 18 - 28 mins then a ping
> to our outside IP drops and we loose internet access BUT the VPN stays
> Up and connected and e-mail and MSN works fine for another 15 or so
> mins then that drops.
>
> Everything from the easynet side has been checked, even the dslam card
> has been changed, but we are still having the same issues,
>
> It's been suggested this morning that the NAT buffer on the PIX is
> not big enough, but I cannot fine any information on the web about
> this,
>
> The PIX was working fine for 2 years in the old office and was carried
> over the 500 years to our new office by hand,
>
> If anyone has any ideas it would be a great help, this problem is
> driving me mad!
>
>
> thanks !!
>


Post your config. Have you added any more devices, even network printers in
the new location? How many IP based devices in the new location? What's the
user license on the 501 (10user, 50user, unlimited).


 
Reply With Quote
 
 
 
 
fartblast@googlemail.com
Guest
Posts: n/a
 
      10-04-2006
Hi,

No More devices, infact less, unlimited user licence on the pix,

just getting the config now, is it possible as i now have another pix
to take the config and setup from one to another pix ?

matt
Brian V wrote:
> <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed) ps.com...
> >
> > Hello !
> >
> >
> > I have a cisco pix 501 using 3des site to site VPN as well as Standard
> > firewall work,
> >
> > We have just moved office and are having a very strange problem that
> > seems to be baffling everyone. we have a 2mb sdsl line from easynet and
> > we are using a Zyxel 792H router to connect, the next step in the
> > network is the Pix, everything works fine for 18 - 28 mins then a ping
> > to our outside IP drops and we loose internet access BUT the VPN stays
> > Up and connected and e-mail and MSN works fine for another 15 or so
> > mins then that drops.
> >
> > Everything from the easynet side has been checked, even the dslam card
> > has been changed, but we are still having the same issues,
> >
> > It's been suggested this morning that the NAT buffer on the PIX is
> > not big enough, but I cannot fine any information on the web about
> > this,
> >
> > The PIX was working fine for 2 years in the old office and was carried
> > over the 500 years to our new office by hand,
> >
> > If anyone has any ideas it would be a great help, this problem is
> > driving me mad!
> >
> >
> > thanks !!
> >

>
> Post your config. Have you added any more devices, even network printers in
> the new location? How many IP based devices in the new location? What's the
> user license on the 501 (10user, 50user, unlimited).


 
Reply With Quote
 
Brian V
Guest
Posts: n/a
 
      10-04-2006

<(E-Mail Removed)> wrote in message
news:(E-Mail Removed) ups.com...
> Hi,
>
> No More devices, infact less, unlimited user licence on the pix,
>
> just getting the config now, is it possible as i now have another pix
> to take the config and setup from one to another pix ?
>
> matt
> Brian V wrote:
>> <(E-Mail Removed)> wrote in message
>> news:(E-Mail Removed) ps.com...
>> >
>> > Hello !
>> >
>> >
>> > I have a cisco pix 501 using 3des site to site VPN as well as Standard
>> > firewall work,
>> >
>> > We have just moved office and are having a very strange problem that
>> > seems to be baffling everyone. we have a 2mb sdsl line from easynet and
>> > we are using a Zyxel 792H router to connect, the next step in the
>> > network is the Pix, everything works fine for 18 - 28 mins then a ping
>> > to our outside IP drops and we loose internet access BUT the VPN stays
>> > Up and connected and e-mail and MSN works fine for another 15 or so
>> > mins then that drops.
>> >
>> > Everything from the easynet side has been checked, even the dslam card
>> > has been changed, but we are still having the same issues,
>> >
>> > It's been suggested this morning that the NAT buffer on the PIX is
>> > not big enough, but I cannot fine any information on the web about
>> > this,
>> >
>> > The PIX was working fine for 2 years in the old office and was carried
>> > over the 500 years to our new office by hand,
>> >
>> > If anyone has any ideas it would be a great help, this problem is
>> > driving me mad!
>> >
>> >
>> > thanks !!
>> >

>>
>> Post your config. Have you added any more devices, even network printers
>> in
>> the new location? How many IP based devices in the new location? What's
>> the
>> user license on the 501 (10user, 50user, unlimited).

>


Sure, just copy and paste it provided the interfaces are the same. Very very
doubtful it's a bad pix tho, sure wouldn't act like that.


 
Reply With Quote
 
James
Guest
Posts: n/a
 
      12-17-2006
Check your subnet masks either end of the PIX, the ones that define what
networks go down the tunnel that is. They must me identical and mirrored
networks.

Regards

Brian V wrote:
> <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed) ups.com...
>> Hi,
>>
>> No More devices, infact less, unlimited user licence on the pix,
>>
>> just getting the config now, is it possible as i now have another pix
>> to take the config and setup from one to another pix ?
>>
>> matt
>> Brian V wrote:
>>> <(E-Mail Removed)> wrote in message
>>> news:(E-Mail Removed) ps.com...
>>>> Hello !
>>>>
>>>>
>>>> I have a cisco pix 501 using 3des site to site VPN as well as Standard
>>>> firewall work,
>>>>
>>>> We have just moved office and are having a very strange problem that
>>>> seems to be baffling everyone. we have a 2mb sdsl line from easynet and
>>>> we are using a Zyxel 792H router to connect, the next step in the
>>>> network is the Pix, everything works fine for 18 - 28 mins then a ping
>>>> to our outside IP drops and we loose internet access BUT the VPN stays
>>>> Up and connected and e-mail and MSN works fine for another 15 or so
>>>> mins then that drops.
>>>>
>>>> Everything from the easynet side has been checked, even the dslam card
>>>> has been changed, but we are still having the same issues,
>>>>
>>>> It's been suggested this morning that the NAT buffer on the PIX is
>>>> not big enough, but I cannot fine any information on the web about
>>>> this,
>>>>
>>>> The PIX was working fine for 2 years in the old office and was carried
>>>> over the 500 years to our new office by hand,
>>>>
>>>> If anyone has any ideas it would be a great help, this problem is
>>>> driving me mad!
>>>>
>>>>
>>>> thanks !!
>>>>
>>> Post your config. Have you added any more devices, even network printers
>>> in
>>> the new location? How many IP based devices in the new location? What's
>>> the
>>> user license on the 501 (10user, 50user, unlimited).

>
> Sure, just copy and paste it provided the interfaces are the same. Very very
> doubtful it's a bad pix tho, sure wouldn't act like that.
>
>

 
Reply With Quote
 
 
 
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Cisco pix 501 vs 501-50 cdoc Cisco 6 05-20-2006 03:53 AM
PIX 501 newbie (VPN issues) brian.marcotte@comcast.net Cisco 0 10-31-2005 09:38 PM
Newbie needs help with Pix to Pix VPN troute_kilgore@yahoo.com Cisco 0 03-02-2005 05:26 PM
PIX 501 <-> PIX 501 - Problem contating private networks on the inside Andre Cisco 7 02-20-2005 07:02 PM
PIX 501 and NT Network Authentication - Newbie needs advice Rob Franetovich Cisco 1 07-09-2003 10:48 PM



Advertisments