Cannot Ping between servers - Cisco Switch, PIX, NAT, HP server

Posted on 2009-02-18
Last Modified: 2012-05-06
I have the following setup.

2 HP servers ( - external NAT) ( - external NAT)

PIX - Internal - External

I have a PIX 515E with NAT enabled.  I cannot ping between servers.  
I have a cisco 3548 switch with 2 VLANs - VLAN 1 has 2 HP servers attached and Internal Interface of PIX, VLAN 10 all external serves and External interface of PIX.

When iIcheck the arp tables on the servers:
on server

Interface: --- 0x10003
Internet Address      Physical Address      Type          00-13-80-d5-95-44    dynamic         00-13-80-d5-95-44     dynamic

On server
Interface: --- 0x10003
  Internet Address      Physical Address      Type          00-13-80-d5-95-44     dynamic         00-22-64-c2-ee-a8     dynamic

As you can see on the 40.10 server the arp cache shows the mac ot the firewall.  I think this is the source of my problem and iIdo not know how to fix it.  Please help.

I have deleted and refreshed the arp cach on the switch and both servers and these were the results.

Thank you.

Question by:egrotjahn
    LVL 43

    Accepted Solution

    You can disable proxy ARP on the PIX to resolve this.  It's a workaround.:

    conf t
    sysopt noproxyarp inside

    You may have an incorrectly configured static NAT on the PIX that is causing the PIX to ARP reply for the address.
    LVL 3

    Expert Comment

    Are the ports for the the two servers (on the switch) set to access or trunk(for the VLAN)?

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    How to run any project with ease

    Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
    - Combine task lists, docs, spreadsheets, and chat in one
    - View and edit from mobile/offline
    - Cut down on emails

    Optimal Xbox 360 connectivity requires "OPEN NAT". If you use Juniper Netscreen or SSG firewall products in a home setting, the following steps will allow you get rid of the dreaded warning screen below and achieve the best online gaming environment…
    On July 14th 2015, Windows Server 2003 will become End of Support, leaving hundreds of thousands of servers around the world that still run this 12 year old operating system vulnerable and potentially out of compliance in many organisations around t…
    Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…
    Polish reports in Access so they look terrific. Take yourself to another level. Equations, Back Color, Alternate Back Color. Write easy VBA Code. Tighten space to use less pages. Launch report from a menu, considering criteria only when it is filled…

    737 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    20 Experts available now in Live!

    Get 1:1 Help Now