Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

ping google.com (ASA blocks reply)

Howdy!

I'm slowly getting my ASA 5505 up to speed here and had a question about ping traffic.

I'd like to be able to ping external hosts (e.g. google.com) from behind my ASA 5505.

Which ACL or NAT do I need to allow the icmp packet to be returned to the pinging initiator (inside host).

Example: (inside host)

192.168.1.2>ping google.com

Pinging google.com [72.14.207.99] with 32 bytes of data:

Request timed out.

Hopefully, we can knock this out without me posting my running-config.

:)

TIA, Kevin

1 ACCEPTED SOLUTION

Accepted Solutions
Gold

Re: ping google.com (ASA blocks reply)

enable icmp inspection..

or, on your inbound acl, allow icmp echo-replies

2 REPLIES
Gold

Re: ping google.com (ASA blocks reply)

enable icmp inspection..

or, on your inbound acl, allow icmp echo-replies

New Member

Re: ping google.com (ASA blocks reply)

enable icmp inspection was it!

Thanks srue!

664
Views
0
Helpful
2
Replies
CreatePlease to create content