ASA 5520

Unanswered Question
Jul 24th, 2008

i have set up a asa in active active config i am able to ping outside interface from the asa but if i connect a host and try to ping i am not getting any reply

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
ralphcarter Thu, 07/24/2008 - 06:11

You have to allow ICMP through the firewall.

Create ICMP group

# object-group icmp-type ICMP-Group

# icmp-object echo-reply

# icmp-object time-exceeded

# icmp-object unreachable

Apply ICMP-Group to incomming traffic

# access-list OUTSIDE-IN extended permit icmp any any object-group ICMP-Group

Actions

This Discussion