cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1083
Views
0
Helpful
6
Replies

ASA 5505 ping on outside

lformelli
Level 1
Level 1

Hi,

I have an ASA 5505 ver 8.2 with inside network 192.168.20.0/24 and 192.168.20.254 configured on inside interface.

Also I have an outside interface 10.10.10.1/24 with default gateway 10.10.10.254 assigned on ethernet of router.

On configuration I have :

access-list outside_access_in extended permit icmp any any

access-group outside_access_in in interface outside

route outside 0.0.0.0 0.0.0.0 10.10.10.254

I try to ping from host on inside network the ethernet of the router but I can't do it .

Does anyone help me about ?

best rgeards

Lorenzo

6 Replies 6

a.alekseev
Level 7
Level 7

could you show the configuration?

in any way...

for ping and trace from inside to outside you can do

policy-map global_policy

class inspection_default

inspect icmp

inspect icmp error

ray_stone
Level 1
Level 1

Hi, Did you use NAT or PAT command? If not then set up these commands and then try. Cheers!!!!!

I use pat on outside address,

best regards

Lorenzo

your pat statement should look like this then:

global (outside) 1 interface

(or something similar)...

does it?

if you're using the outside interface IP, use the 'interface' keyword in the global statement and not the actual ip of the outside interface.

try adding the following to your outside2in acl:

...permit icmp any any echo-reply

or turn on icmp inpsection.

turn on icmp inspection.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: