PIX-3-305005: No translation group found for udp src outside

We have a PIX 515 and users who connect via the Cisco VPN client. The VPN clients are assigned address in the 172.16.25.0 range. We are getting approx

1,000 'no translation group found messages that are like:

%PIX-3-305005: No translation group found for udp src outside:172.16.25.

14/137 dst inside:172.255.255.255/137

137 is netbios and 172.255.255.255 is some kind of broadcast address (not sure why it isn't 172.16.25.255). This traffic isn't needed because these users are able to do what they need to do. Is there anything I can configure differently to resolve this? Is this a PIX issue or is it a setting on the client PC's or is this just the cost of running Windows?

Reply to
pkiller
Loading thread data ...

In article , pkiller wrote: :We have a PIX 515 and users who connect via the Cisco VPN client. The VPN :clients are assigned address in the 172.16.25.0 range. We are getting approx :1,000 'no translation group found messages that are like:

:%PIX-3-305005: No translation group found for udp src outside:172.16.25.14/137 dst inside:172.255.255.255/137

:137 is netbios and 172.255.255.255 is some kind of broadcast address (not :sure why it isn't 172.16.25.255).

I'm surprised it isn't 172.16.255.255 .

You probably do not have a netmask configured for your ip pool that is used to hand out the dynamic IPs for the VPN users.

: This traffic isn't needed because these :users are able to do what they need to do. Is there anything I can configure :differently to resolve this?

You should probably configure a WINS server. If that doesn't help,

no logging message 305005

:Is this a PIX issue or is it a setting on the :client PC's or is this just the cost of running Windows?

The wrong netmask is PIX, the broadcasts are Windows.

Reply to
Walter Roberson

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.