ASA5520 route / nat problem

Unanswered Question
Mar 17th, 2008

problem:

i can ping from local PC to inside int of fw but unable to ping outside interface.

debug icmp trace shows traffic passing as normal but on PC it gets "request timed out"

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
alanajjar Tue, 03/18/2008 - 03:45

Hi,

If you want to enable ping to the outside interface, you have to addd this command :

icmp permit ip_address net_mask echo outside

icmp permit ip_address net_mask echo-reply outside

this will enable ping on the outside interface.

I think you need to do this within the context level it self, not on the system level. the ip address should be within the context inside range.

regards

Actions

This Discussion