We have a strange bug with Pix Firewall 4.2(2) (3 token ring interfaces).
That is, if we configure a snmp o syslog server as syslog destination, then
if the server go down for 10 minuts..Bang! the PIX dies and need reboot.

This is a strange behaviour and searching Cisco Docs we have found this Bug
[CSCdk34295]:

Release Notes

Customer with multiple smtp (4) servers. If servers are turned off or go
down
the pix will arp until all the 256 blocks are used up stopping traffic.
Wordaround:
remove those servers which are turned off or down to
preserve 256-byte blocks.
The servers include smtp server, syslog server, tacacs server,
radius server, url servers, snmp servers.

The workaround is incredible! A device so important blocked by a minor
problem like a server reboot
For now i have disabled syslog messaging, but now i can't view who's
knocking my IP from outside.

..obviously there must be a better answer from Cisco to this!

Thank You(s) in advance for responding.

Giovanni Tomassini
Laboratorio - Etruria Informatica S.r.l. (Gruppo Etruria - Banca Popolare
dell'Etruria e del Lazio)
Via Calamandrei, 255
52100 Arezzo
e-mail: [EMAIL PROTECTED]
Tel: 0575398274
Fax: 0575398280
BEGIN:VCARD
VERSION:2.1
N:Tomassini;Giovanni
FN:Giovanni Tomassini
ORG:Etruria Informatica S.r.l.;Laboratorio
TITLE:System Administrator-Engineer
TEL;WORK;VOICE:+(39) 0575398274
TEL;WORK;FAX:+(39) 0575398280
ADR;WORK:;;via Calamandrei, 255;Arezzo;AR;52100;Italy
LABEL;WORK;ENCODING=QUOTED-PRINTABLE:via Calamandrei, 255=0D=0AArezzo, AR 52100=0D=0AItaly
URL:
URL:http://www.etr.it
EMAIL;PREF;INTERNET:[EMAIL PROTECTED]
REV:19990322T113144Z
END:VCARD

Reply via email to