cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1039
Views
0
Helpful
2
Replies

ping google.com (ASA blocks reply)

kcaporaso
Level 1
Level 1

Howdy!

I'm slowly getting my ASA 5505 up to speed here and had a question about ping traffic.

I'd like to be able to ping external hosts (e.g. google.com) from behind my ASA 5505.

Which ACL or NAT do I need to allow the icmp packet to be returned to the pinging initiator (inside host).

Example: (inside host)

192.168.1.2>ping google.com

Pinging google.com [72.14.207.99] with 32 bytes of data:

Request timed out.

Hopefully, we can knock this out without me posting my running-config.

:)

TIA, Kevin

1 Accepted Solution

Accepted Solutions

srue
Level 7
Level 7

enable icmp inspection..

or, on your inbound acl, allow icmp echo-replies

View solution in original post

2 Replies 2

srue
Level 7
Level 7

enable icmp inspection..

or, on your inbound acl, allow icmp echo-replies

enable icmp inspection was it!

Thanks srue!

Review Cisco Networking products for a $25 gift card