natted computers cannot get out

[didoo007]

as the tittle says,
I have configured my pix, and all my workstations that have an intrenal ip can go out to the internet, but all the machines that have a nat on the pix cannot go out the the internet..
any ideas???
thanks a bunch in advance
cheers
Damien

 

[didoo007]

the first opy, I had changed the ips which made it confusing...
I reposted it so it has the real IP's...
I think the second configuration will be easier to read...
I wish I could remove the first one I posted but I cannot

 

[azstyx]

HI Damien,
Was just catching up on your posts. Can you tell us some more about the outside architecture....why do you have two subnets on the outside segment? Are there two routers? Can you describe the topology? It looks to me like you have a routing problem going on, since the one subnet that uses the statics and conduits does work and the other devices which pat to the outside interface do not.
Keith

 

[didoo007]

we just have two segments of IP's on the same outside router....
we had ran out of IP's on the first one so our ISP gave us a second one...
I'm still fighting with it

 

[yizhar]

HI.

Try to "traceroute" from the Internet to the problematic ip addresses using

http://www.samspade.org

Or any other method (like a PC connected to ISP with dial-up).
Do you get to your perimeter router?
Check the ARP cache on your router, and/or try to reload the router just in case.

Can your pix ping the outside world?

Bye


Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar