Firewall problem?

[MJNSBF]

I have a pix 515 and am using the alias command for those behind the firewall to be able to access a web server that is also behind the firewall. Periodically, the users will not be able to access the server, but after trying a couple of times, the page pops up. This wasn't an issue before installing the firewall. Do you think it might be coincidence that we are having problems with the server after installing the firewall, or is there possible something going on with the firewall?

Thanks in advance for any suggestions.

M

 

[yizhar]

HI.

This is probably because of "proxy arp".
The pix answers ARP requests to the ip address of the server, which is not good since the server itself should do it.

Solutions:
* If you have internal DNS server that clients connect to, you can manualy configure it and remove the alias command from the pix.
* If you keep using alias, you need to disable proxy-arp.
sysopt noproxyarp inside

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_62/cmdref/ab.htm#65183

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar

 

[MJNSBF]

This seems to have fixed my problem. I used the sysopt noproxyarp inside command.

Thank you very much for the help!

M