cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
391
Views
0
Helpful
2
Replies

Unable to Ping from an Inside Host to DMZ Webservers

nguyenvinnie
Level 1
Level 1

icmp deny any outside

icmp permit any inside

icmp permit any dmz

The above statements are configured on my PIX

is there anything else I need to enable Ping from my PC to a web server on the DMZ?

2 Replies 2

gfullage
Cisco Employee
Cisco Employee

The "icmp" commands only affect traffic TO the PIX itself, not THROUGH it. By default the PIX will only open holes for return traffic for TCP/UDP based traffic, not ICMP. To get it to allow your return ICMP packets back in you have to turn on ICMP inspection. Use the:

inspect icmp

inspect icmp error

under your global service-policy.

Thanks for your help, I'll give it a try.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: