cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
429
Views
5
Helpful
3
Replies

unable to PING from inside to outside.

rmaxson2
Level 1
Level 1

I can ping internally no problem, I cannot get a ping (echo-reply?) from anywhere outside. If I ping a URL I get a DNS notice with the IP but no replys. I suspect it's a nating issue but can't figure it out.

Here's the config.. don't laugh it's a mess I'm supposed to clean up but... well.

Realevevent rules (I think, full config enclosed)

interface GigabitEthernet0/0

nameif Outside

security-level 0

ip address 172.32.1.2 255.255.255.0

!

interface GigabitEthernet0/1

nameif Inside

security-level 70

ip address 10.1.7.101 255.255.240.0

access-list Outside_access_in extended permit icmp any any

access-list Inside_access_in extended permit icmp any any

access-list Inside_access_in extended permit ip any any

nat-control

global (Outside) 1 63.85.131.8 netmask 255.255.255.255

global (DMZ) 1 interface

nat (Inside) 0 access-list nat0

nat (Inside) 1 0.0.0.0 0.0.0.0

nat (DMZ) 0 access-list nonat_dmz

nat (DMZ) 1 0.0.0.0 0.0.0.0

access-group Outside_access_in in interface Outside

access-group Inside_access_in in interface Inside

attached is the full confing.

1 Accepted Solution

Accepted Solutions

husycisco
Level 7
Level 7

Hi Richard

Try this

policy-map global_policy

class inspection_default

inspect icmp

Regards

View solution in original post

3 Replies 3

JORGE RODRIGUEZ
Level 10
Level 10

Go over this link, how pix handles ICMP this link also inlcludes code version 7.x and it should apply to your ASA as well.

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a0080094e8a.shtml

Rgds

Jorge

Jorge Rodriguez

husycisco
Level 7
Level 7

Hi Richard

Try this

policy-map global_policy

class inspection_default

inspect icmp

Regards

rmaxson2
Level 1
Level 1

Thanks guys I knew it was something simple that I wasn't seeing.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card