I would like to take a look at your configs. You should be able to ping the inside interface of the pix (unless there is an acl on the inside interface that blocks ping). You cannot ping outside interface of Pix from inside segment. Paste your configs in next post.
First, icmp is not really consider stateful in the Cisco PIX, at least in 6.3 train anyway. And the interface of the PIX is by default not pingable.
Also, you can only ping the inside PIX interface from the inside network, you cannot ping the PIX outside interface from the inside network. Outside interface is pingable from outside network if you allow it.
Basically, to allow ping to the inside here is the command.
icmp permit any inside
It is not a preferable way to do it, I would typically do something below, assume 10.0.0.0/8 is the whole network behind the pix
icmp permit 10.0.0.0 255.0.0.0 inside
You can of course limit the type of icmp, common ones are echo, echo-reply, time-exceeded, source-quench, redirect, unreachable
The second mistake you made for browsing is that DNS request and reply uses UDP instead of TCP. DNS zone transfer uses TCP. So you would need to modify your inside ACL to permit UDP.
Hi everyone, I would like to thank you in advance for any help you can provide a newcomer like myself!
Im studying the 100-105 book by Odom and am currently on the topic of Port security. I purchased a used 2960 and I'm trying to follow a...
While deploying a number of 18xx/2802/3802 model access points (APs), which run AP-COS as their operating platform. It can be observed on some occasions that while many of their access points were able to join the fabric WLC withou...
I am going to design and build an LAN network under a tunnel underground with long distance between the switches.
I will have 2 Catalyst switches and 8 Industrial IE3000, and they will be connected with fiber.
For now I am planning on use Layer-2 s...