Can't get on the net

[jce001]

Anybody have a fix for this. I have a NAT pool, that seemed to be working fine. Now I have some users that can't get on the net because their UDP request to DNS is being blocked. Here's what it looks like from my SYSLOG.

2003-07-14,18:46:45,192.168.25.1,20,3,Jul 14 2003 18:37:17: %PIX-3-305006: regular translation creation failed for udp src inside:192.168.25.54/1178 dst outside:198.6.1.5/53

 

[jce001]

Also, I have figured out that if I do a "clear xlate" and save it works fine for a while, then stops again. It sounds like a buffer is too full or a setting needs to be tweaked a little.

 

[N0ktar]

It looks like you're running out of licences on your PIX, you got 10 or 50?

 

[jce001]

I have unlimited licenses.

 

[N0ktar]

Well, that was the only time I have seen this error.

 

[N0ktar]

Check this out:

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_v53/syslog/pixemsgs.htm#23100

 

[jce001]

I read this in the other thread. His problem is very similar to mine. Could this help?

sysopt noproxyarp inside

 

[yizhar]

HI.

Post your "global" commands.
If you're using NAT only (range of addresses) and no PAT (single address), it can cause such a problem.
The solution in such case is simply to use PAT, or PAT+NAT.

Bye


Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar