We have a Cisco Pix 506 firewall setup to allow anyone to access the Internet from the inside.
We have a AIX 4.3 IBM Unix server that is on the internal LAN along with about 60 other workstations and servers.
The AIX has a nic that is in the ip scheme of our internal network. The second nic is in the ip scheme of our DMZ. My Windows 2000 Professional workstation is configured the same. (The pix is set as the default gateway and static routes map to all WAN sites out a local 2600 Cisco router.)
I am able to connect to any Internet site from my workstation. The AIX is unable to connect to anything outside our WAN. The PIX, AIX, and my workstation can all ping each other. Traceroute goes from my machine to the PIX, just like the AIX.
From debugging the PIX I can see that pinging from the AIX to the ip of www.cisco.com gets to the internal side of the PIX, but there is no reply. From my workstation I can ping the ip of www.cisco.com and get a reply. The only ACL on the PIX if for incoming trafic only.
I have had outside help take a look at the PIX and in their oppinion, it’s not the PIX. The same with AIX.
Any suggestions would be helpful,
Nate
