ASA 5505 ping on outside

Unanswered Question
Jul 5th, 2008


I have an ASA 5505 ver 8.2 with inside network and configured on inside interface.

Also I have an outside interface with default gateway assigned on ethernet of router.

On configuration I have :

access-list outside_access_in extended permit icmp any any

access-group outside_access_in in interface outside

route outside

I try to ping from host on inside network the ethernet of the router but I can't do it .

Does anyone help me about ?

best rgeards


I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
a.alekseev Mon, 07/07/2008 - 10:58

in any way...

for ping and trace from inside to outside you can do

policy-map global_policy

class inspection_default

inspect icmp

inspect icmp error

ray_stone Sat, 07/05/2008 - 03:24

Hi, Did you use NAT or PAT command? If not then set up these commands and then try. Cheers!!!!!

srue Sat, 07/05/2008 - 10:51

your pat statement should look like this then:

global (outside) 1 interface

(or something similar)...

does it?

if you're using the outside interface IP, use the 'interface' keyword in the global statement and not the actual ip of the outside interface.

try adding the following to your outside2in acl:

...permit icmp any any echo-reply

or turn on icmp inpsection.


This Discussion