cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
559
Views
0
Helpful
4
Replies

Ping from inside to outside

Steve Graham
Level 1
Level 1

I am having trouble getting ping to work for my inside networks through my outside interface. Is there a recommended approach for allowing this to traverse from an inside interface to an outside host beyond our network?

1 Accepted Solution

Accepted Solutions

I assume inside-out is applied by "access-group inside-out in interface inside"?

access-list inside-out extended permit icmp any any echo

access-list outside-in extended permit icmp any any echo-reply

access-group outside-in in interface outside

View solution in original post

4 Replies 4

JORGE RODRIGUEZ
Level 10
Level 10

Jorge, great material, however, my inside users still cannot ping any hosts on the outside. Any other suggestions, here's a copy of my inside-out entries:

access-list inside-out extended permit ip any any

access-list inside-out extended permit icmp any any echo-reply

access-list inside-out extended permit icmp any any source-quench

access-list inside-out extended permit icmp any any time-exceeded

access-list inside-out extended permit icmp any any unreachable

I assume inside-out is applied by "access-group inside-out in interface inside"?

access-list inside-out extended permit icmp any any echo

access-list outside-in extended permit icmp any any echo-reply

access-group outside-in in interface outside

Yes "access-group inside-out in interface inside"

I did not have the echo-reply on the outside-in ACL...

That solves my issue, thanks for you help.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: