Pix 506 restart after loss of internet 1

[sevendcruz]

Once a week or so a couple of workstations will lose internet connection, but vpn is still up. The work around has been to restart the pix and sure enough internet connection for the couple of workstations are working.
Any ideas?

 

[yizhar]

HI.

Are you using NAT, PAT or both?

Post here the pix config.

Use syslog messages to troubleshoot.

Check the field notice page. I don't think it is related to that specific problem, but for pix 506 it's good to visit this page:

http://www.cisco.com/warp/public/tech_tips/index/hardware/security/500/fn.html

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar

 

[sevendcruz]

Thanks Yizhar,

We do have nat enabled, the link you provided was helpful.

 

[yizhar]

HI.

Post here at least the "global" commands from your config, and the number of internal hosts. This can tell if you're having a problem that the NAT pool is full.

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar

 

[sevendcruz]

Thanks yizhar,

Cisco is sending the RMA for the pix...your link that you provided showed that there was a hardware defect in the some pix 506's made in our serial number range.

If this dosent help I will definately post the config to see where we may have errored...thanks again

 

[yizhar]

HI.

The symptoms that you described at the first message looks more like configuration issue rather then hardware.

I still recommend that you check the "global" configuration, and try to use PAT only (single ip) for workstations instead of NAT/PAT combination or NAT only.

And use syslog messages - this is a must troubleshooting tool, not optional.

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar