Search results for query: *

thanks for the help guys. it turns out all i had to do was restart the router. for some reason, the router wasn't refreshing its arp cache.

the default route is correct..its suppose to be .33. if you do a nslookup on both .33 and .37, it comes back with the same mx record. .33 is our gateway, and .37 is our front end server.

no they're not. i think its just a dns error on their end. it works though.

unclerico, funny you should ask. I just did a tracert to google on my production pix and i got this 1 3 ms <1 ms <1 ms 10.16.0.1 2 1 ms 2 ms 1 ms def-mx1.remecrds.com [gateway IP] 3 2 ms 2 ms 2 ms wsip-98-173-150-45.sd.sd.cox.net [98.173.150.45] I...

Thanks North. Those are very good suggestions. And Thank you for the time in trying to solve this with me. When we finally get it solved, you'll have to let me know how to get a hold of you so i can buy you a cold one. SERIOUSLY!!

no. our gateway for all hosts on the lan is a cisco 2948-L3 which is 10.16.0.1

yes i'm going through the same production switch. i just simply swapped the pix firewalls out. I did restart the proxy after the pix was swapped out but it still didn't work on my workstation. I can't recall if i tried to access the internet on the proxy itself after it was restarted. If the...

sure. I will have to do it after hours.

basically, to get to the internet it goes like this: pix e0 is hooked up to a 3550 switch on port 2. on port 1 of the switch, its hooked to the isp gateway router. pix e1 is hooked up to another network switch. side note, the proxy has 2 nics (one outside and one inside address) that is...

unfortunately no. there is no line like you mentioned above. i don't understand why its not working. i can only guess its because of the different os versions. same exact configuration too.

is this line below allowing access to go out to the internet? access-list internet extended permit tcp host 10.16.48.110 any I should have mentioned that internet access is allowed through MS Proxy which is address 10.16.18.60 which corresponds to this line access-list internet extended...

the IP would be 10.16.48.110. the only time i can ping out is from the pix but not from any hosts inside our network.

to test the pix, i disconnect the pix in production and hook up the spare pix i'm trying to get to work. Once the spare pix is on the production line, i was able to telnet into it and ping sites like yahoo.com and google.com.

Sorry, that was an old config. here is the current one. the rest is the same interface Ethernet0 speed 100 duplex full nameif outside security-level 0 ip address 98.173.152.40 255.255.255.224 ! interface Ethernet1 duplex full nameif inside security-level 100 ip address 10.16.0.10...

Hey guys, Need some help here. I have 2 515e pix firewalls. One is in production and the other is a spare. The one in production has IOS 6.3 and the spare has IOS 7.0. I'm trying to get the spare one to work with the same configuration as the one in production but it doesn't work. I can ping...