No announcement yet.

Cannot access the internet at random times (PIX 501)

  • Filter
  • Time
  • Show
Clear All
new posts

  • Cannot access the internet at random times (PIX 501)

    We have a very simple setup with a broadband service, PIX 501 and DELL switch:

    Internet (ISP Router) -> PIX -> DELL Switch

    There are two W2K3 servers and ~10 XP Pro SP2 desktops.

    The PIX is configured for site-to-site VPN to another office.

    We are having a problem that the desktops would often lose access to the internet at random times. The problem happens to pretty much all desktops at various times of the day, and the problem lasts from minutes to hours. The mysterious thing is that when certain desktops loses access to the internet, the other desktops and servers have no problem accessing the internet. In fact, we can still access the troubled desktops from within the LAN. From the troubled desktop with no internet access, we can still ping other machines on the local LAN and to remote machines via the site-to-site VPN. So the local LAN and internet connection are both working. However, pinging to outer IP addresses would fail.

    This seems to point to the PIX as the culprit, but we are struggling to understand why and find the work around.

    The problem seems to happen to only the desktops but never to the servers. We have 1-to-1 NAT for the server, and many-to-1 NAT for the desktops.

    Any clues or directions on how to resolve the problem will be highly appreciated.

  • #2
    Re: Cannot access the internet at random times (PIX 501)

    Just a thought here...

    I know that there are PIX firewalls that have "restricted licenses". Do you know how many devices can connect to your PIX at any one time? Is it restricted or unlimited?

    I believe you can do a show version and find out.

    If it was, say, restricted at 10 concurrent users, perhaps that would explain the issue.
    David Davis - Petri Forums Moderator & Video Training Author
    Train Signal - The Global Leader in IT Video Training - Free IT Training Products
    Personal Websites: &