Need help configuring PIX 501 after ISP IP adddress change

What does your NAT statement look like in the config? Also your global statement?

Should look something like:

global (Outside) 10 interface nat (Inside) 10 0.0.0.0 0.0.0.0

Also from the firewall can you ping you next hop

route outside 0.0.0.0 0.0.0.0 x1.x1.x1.x1

Where x1.x1.x1.x1 is your next hop, if not you have other problems.

global nat static

The global statement may contain the old IP also , unless it's configured with the "interface" option.

Verify that you don't have two default route ( though i don't remember if the PIX allows to have two). You may need to do a

no route outside 0.0.0.0 0.0.0.0 x1.x1.x1.x1 1

And be sure you can ping the default gateway from the PIX before concluding that it's a translation problem

ping outside y.y.y.y

Here are the "old" lines in the configuration that may be of note:

ip address outside 68.78.88.193 255.255.255.248 ip address inside 10.1.1.1 255.255.255.0

global (outside) 1 interface nat (inside) 0 access-list nonat nat (inside) 1 0.0.0.0 0.0.0.0

route outisde 0.0.0.0 0.0.0.0 68.78.88.198 1

I am not sure what else to include here.

Mike

From the PIX do a "ping outside y.y.y.y" (where y.y.y.y is the default gateway) and a "ping inside [PC-ip address]" to validate your connectivity on both sides of the PIX

*** And it will be more easy to help if you post your actual sanatized config instead of the old one.

this might sound strange but when our ISP done the same the only way the pix would work is if we rebooted the router in front of the pix, everything worked fine after that.

Dave