If a host on 192.168.1.x, the inside interface tries to ping a host on 192.168.10.x (a network behind a router which is connected 6.1)
The ASA returns:
Jan 23 2010 10:17:58: %ASA-3-305006: portmap translation creation failed for icmp src inside:192.168.1.3 dst inside:192.168.10.22 (type 8, code 0)
and the ping fails.
If you try to ping directly from the ASA you get a similar result:
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.10.22, timeout is 2 seconds:
Jan 23 2010 10:20:35: %ASA-4-313004: Denied ICMP type=0, from laddr 192.168.1.6 on interface inside to 192.168.1.1: no matching session
Seems to me this should work right out of the box, suggestions?
name 192.168.10.0 Cowacella description named after thomas J's Monticello with a cow twist
access-list inside_access_in_1 extended permit ip any any
global (outside) 1 interface
nat (inside) 1 0.0.0.0 0.0.0.0
access-group inside_access_in_1 in interface inside
route inside Cowacella 255.255.255.0 192.168.1.6 1