Inside connection issues

[lost4life]

I have installed a PIX525 into our working environment. I am having connection issues with servers that are on the same interface. I will be able to connect. Later I go back and I can't. I reboot the server and I am able to connect. I don't understand what is going on....

I also have a Oracle database server. I am able to connect but if I let the connection idle for a while (1/2 to an hour) then I get an error about not being connected to oracle.

The remote office who connect through an IPSec tunnel are not having any of these issues. Any suggestions on where to look for a solutions????

 

[baddos]

Are you trying to connect to their public IPs (NAT'd) or their real IPs?

 

[lost4life]

I was told that by default, the firewall will answer arp request on all interface-proxyarp. So no matter what address I used - inside or outside, the firewall would answer. This seems to have been causing the timeout issue. Once I disable the firewall from answering arp request by Sysopt noproxyarp inside_interface the timeout issue was solved.

 

[yizhar]

HI.

> I was told that by default, the firewall will answer arp request on all interface-proxyarp
It does that for addresses that have "alias" command, or wrong "static" statements.
Disabling the proxy arp on inside interface is OK, but you should also check if you have other errors or unneeded statements in your config.


Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar