 Re: Migrating from R55 TO R61
you might redo your anti-spoofing rules as if you changed the topology that could be your holdup. You may need to enable logging of implied rules and look at the smartview tracker.
Another area that could be now wrong is the ip address of the hiding ip (NAT) if it was statically set before the new external network would not work for that. You should look for the internal network object and see what it is nat'd to (or if it is in fact still nat'd). In your smart dashboard look under the NAT tab to verify what is being used. One easy thing to change it to is 0.0.0.0 which will hide all rfc1918 traffic destined for the internet behind the ip address of the gateway.
Lastly you may have an ARP/Proxy ARP issue although the previous workaround would resolve that since the gateway does arp for its own address automatically.
Let me know what comes of it and if you need more help! |