PIX 501, connections to Citrix server

[scrimmy]

Please help.

I have added the statements

access-list 100 permit tcp 10.172.0.0 255.255.0.0 host 10.240.245.10 eq 1494
static (inside,outside) 10.240.245.10 172.31.102.121 netmask 255.255.255.255 0 0

where 172.31.102.121 is the IP address of our Citrix server and 10.172.0.0 is the outside subnet that needs access to the server.

The PC's on the 10.172.0.0 network do not get a connection to the citrix server but they can get connection to other addresses that have been translated through the PIX 501

Thanks in advance.

 

[yizhar]

HI.

What is the pix version?
How is routing configured for 10.172.0.0 ?
How do they get in?
What is the default gateway of the Citrix server?
Use syslog messages at the pix - what relevant info do you get when trying to connect?
Try to open (on the pix and server itself) and test other protocols/ports like HTTP,FTP or telnet from those clients to the Citrix. Can they connect?
Try to clear the ARP cache on the router connected to the pix outside.
Is the address 10.240.245.10 routed to the pix?

More info about ip addressing, routing and pix configuration is needed.

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar