cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
239
Views
0
Helpful
1
Replies

ASA appears to be implicitly allowing ICMP

james.davis
Level 1
Level 1

I've been configuring my ASA and noticed that although I configured an access-list incoming on the external interface to allow pings of the external interface, the packets didn't appear to be hitting that access list.

I removed the parts of the access-list that I thought allowed the pings, but the pings are still successful. The packet-tracer tool seems to show them being permitted implicitly.

Any ideas?

1 Reply 1

james.davis
Level 1
Level 1

It's the 'icmp' command that I was looking for. :-)

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: