PIX port problem

[mikes999]

I am reconfiguring the PIX515 from scratch, and ran into an interesting situation at the very early stage of configuration: after naming (nameif), enabling (int eth1 auto) and assigning an IP address, I cannot ping out the next host from "inside". First ping goes out with 0ms, and the rest are unreachable. All subsequent pings are unreachable solid. If I clear arp and ping, again: first ping goes 0ms, and the rest time out.

I powercycled the box several times, reset tge flash and all the connectors inside it - to no avail.

Any suggestions will be greatly appreciated (but, please, keep in mind, that the box is not on the warranty...

Thanks,

M.S.

 

[yizhar]

HI.

Did you "clear ip arp" or reload the next hop, or only the pix itself?

Check for syslog error messages.

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar

 

[mikes999]

Thanks, yizhar;

I cleared up the pix itself, but I beleieve I know now, what was wrong: an IP conflict. There was a secondary (hidden) IP address on another router on the same network I wasn't aware about. This router was configured to drop incoming ICMP, so I could not detect the port either, so, after I assigned the conflicting IP to the PIX "inside", once the PIX learned from the first ping about the conflict, it stopped sending ICMP to the wire. After clearing the arp table, the first "learning" ping was doing the same all over again.

Stupid, isn't it?

Thanks again.