[Last Call] Learn how to a build a cloud-first strategyRegister Now


Cannot Ping between servers - Cisco Switch, PIX, NAT, HP server

Posted on 2009-02-18
Medium Priority
Last Modified: 2012-05-06
I have the following setup.

2 HP servers ( - external NAT) ( - external NAT)

PIX - Internal - External

I have a PIX 515E with NAT enabled.  I cannot ping between servers.  
I have a cisco 3548 switch with 2 VLANs - VLAN 1 has 2 HP servers attached and Internal Interface of PIX, VLAN 10 all external serves and External interface of PIX.

When iIcheck the arp tables on the servers:
on server

Interface: --- 0x10003
Internet Address      Physical Address      Type          00-13-80-d5-95-44    dynamic         00-13-80-d5-95-44     dynamic

On server
Interface: --- 0x10003
  Internet Address      Physical Address      Type          00-13-80-d5-95-44     dynamic         00-22-64-c2-ee-a8     dynamic

As you can see on the 40.10 server the arp cache shows the mac ot the firewall.  I think this is the source of my problem and iIdo not know how to fix it.  Please help.

I have deleted and refreshed the arp cach on the switch and both servers and these were the results.

Thank you.

Question by:egrotjahn
LVL 43

Accepted Solution

JFrederick29 earned 2000 total points
ID: 23673821
You can disable proxy ARP on the PIX to resolve this.  It's a workaround.:

conf t
sysopt noproxyarp inside

You may have an incorrectly configured static NAT on the PIX that is causing the PIX to ARP reply for the address.

Expert Comment

ID: 23673859
Are the ports for the the two servers (on the switch) set to access or trunk(for the VLAN)?

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
How to fix a SonicWall Gateway Anti-Virus firewall blocking automatic updates to apps like Windows, Adobe, Symantec, etc.
Look below the covers at a subform control , and the form that is inside it. Explore properties and see how easy it is to aggregate, get statistics, and synchronize results for your data. A Microsoft Access subform is used to show relevant calcul…
When cloud platforms entered the scene, users and companies jumped on board to take advantage of the many benefits, like the ability to work and connect with company information from various locations. What many didn't foresee was the increased risk…

831 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question