Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
479
Views
0
Helpful
7
Replies

IMCP Deny on oustide Interface

Go to solution
michael.m.williams
Level 1
Level 1

‎07-24-2008 11:54 AM - edited ‎03-11-2019 06:19 AM

I have an ASA 5505. I need to ping from the inside interface 10.xx.70.1 to the outside xx.xxx.120.115. I have IGMP inspect going but still can not ping anything on the outside.

Can some one help me fix this

Thanks

mike

Labels:
0 Helpful
2 Accepted Solutions

Accepted Solutions

Go to solution
a.alekseev
Level 7
Level 7
In response to michael.m.williams

‎07-25-2008 06:01 AM

Hi, Mike

Could you show the configuration.

I think it would the easiest way to help.

View solution in original post

0 Helpful

Go to solution
acomiskey
Level 10
Level 10
In response to a.alekseev

‎07-25-2008 06:05 AM

access-list group-in_1 extended permit icmp any any

View solution in original post

0 Helpful
7 Replies 7

Go to solution
dhananjoy chowdhury
Level 5
Level 5

‎07-24-2008 12:34 PM

Have you configured NAT for the internal subnet 10.xx.70.0 ?

0 Helpful

Go to solution
michael.m.williams
Level 1
Level 1
In response to dhananjoy chowdhury

‎07-25-2008 04:59 AM

Yes I have. Everything seems to be working I just can't ping from the inside to any device on the outside.

Mike

0 Helpful

Go to solution
Fernando_Meza
Level 7
Level 7

‎07-24-2008 04:49 PM

Hi,

I suggest to read the below article. It contains steps and configuration examples

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a0080094e8a.shtml#topic0

0 Helpful

Go to solution
michael.m.williams
Level 1
Level 1
In response to Fernando_Meza

‎07-25-2008 05:22 AM

Hello,

Thanks for the link. I have ICMP inspection tured on but when I ping I get

"Deny ICMP src inside 10.xx.180.5 dst outside xxx.xx.120.125 (type 8, code 0) by "access group-in_1" from the ASA.

Thanks

Mike

0 Helpful

Go to solution
a.alekseev
Level 7
Level 7
In response to michael.m.williams

‎07-25-2008 06:01 AM

Hi, Mike

Could you show the configuration.

I think it would the easiest way to help.

0 Helpful

Go to solution
acomiskey
Level 10
Level 10
In response to a.alekseev

‎07-25-2008 06:05 AM

access-list group-in_1 extended permit icmp any any

0 Helpful

Go to solution
michael.m.williams
Level 1
Level 1
In response to acomiskey

‎07-25-2008 12:42 PM

Thant did it thanks.

Mike

0 Helpful
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Customers Also Viewed These Support Documents
Review Cisco Networking products for a $25 gift card