New pix........old config

[heeltar]

My old pix 515 was locking up.......cisco sent me a RMA replacement Pix 515. I TFTP the old config to new pix...all looks well.....but. I could get in from outside with VPN and thru Infuse server. I could NOT get out from Internal Lan to internet. I cleared the Arp-cache from Main router and Switch also Cleared CAM table on Switch. This did not help.
We are running Sprint DSL... could the MAC address that is tied to our outside interface and IP be cached or whatever on Sprint side and this be causing the problems.

 

[andf1]

The MAC address issue would have made sense if you had no connectivity - outbound and inbound. You mention that you have inbound connectivity.

Andy

 

[heeltar]

Yes, users could get in with VPN and thru Infuse from the outside.
Local Lan users could not get out. I could ping the inside interface from local client on lan. I could not ping anything on outside.
I have spoken with Sprint and they say it would not be a Mac issue with the DSL connection.

What else should I try or consider.
Thanks in advance

 

[dopehead]

Sounds i little like you may have pasted it in too fast, Try comparing the two, not by hand but with some util.

Also, is the sw version the same after you got the new unit, could be a buggy sw ?

Also you could post the config here, maybe we can locate the problem.

Jan

Network Systems Engineer
CCNA/CQS/CCSP

 

[themut]

It could be an incorrect crypto map configuration... the look at the FAQ for safe posting and try to post your configuration.

 

[heeltar]

I reinstalled the Pix sunday and cleared the cam on main switch and inside internet worked like a champ, but this time vpn and infuse would not work. After about 30 mins the outside "stuff" vpn and infuse started working. I still beleive it was a cache issue somewhere. I rebooted the pix and everything came up smooth as silk. It has been running fine since then.
Thanks for the help.