outside interface trying to ping inside box, no translation group message.

Unanswered Question
Apr 30th, 2008
User Badges:

I upgraded this asa to code 8.0(3) and I have been seeing this error. NO translation group for icmp src outside:publicIP dst:NOC:insideIP (type3 code4)

to me it looks as if the outside interface is trying to ping a box on the noc network. Why would it do that and what can i do to allow or deny?

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
vijay.t Wed, 04/30/2008 - 05:32
User Badges:

You are getting the reply from Outside Interface IP or some external IP.


are you using ICMP access-list on the outside Interface ?

morgan.kelly Thu, 05/01/2008 - 03:12
User Badges:

the message is No translation group foung for icmp src outside:publicIP dst NOC:privateIP.

The publicIP is the interface IP.

The privateIP is a box on the localy connected lan.

There are access-lists on the outside interface.

Actions

This Discussion