Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

can not ping

Hi

I am facing a piqular problem.

I have 3-4 pix .From inside 3 pix users can ping. but same configure from one pix can not pix.

pix inside 192.168.31.10

pix outside 192.168.50.227/29

router inside 192.168.50.228/29

router outside 192.168.100.3

-------

access-list 101 permit tcp any any

access-list 101 permit icmp any any

nat (inside) 1 0.0.0.0 0.0.0.0 0 0

static (inside,outside) 192.168.50.129 192.168.33.11 netmask 255.255.255.255 0 0

access-group 101 in interface outside

-----------------------

user who have 192.168.33.20 can not ping

192.168.50.228 and 192.168.100.1

but static user 192.168.33.11 can ping.

it is strenge to me.

any solution.

Thanks

Biplob

2 REPLIES
Bronze

Re: can not ping

hi

the obvious missing this is "global" statement for inside users.

add a global command :

global(outside) 1 x.x.x.x

i hope this will take care of this issue.

regards

aashish C

New Member

Re: can not ping

Hi

ok but my other pix work fine without global command.

and as your suzation I add

global (outside) 1 192.168.50.229-192.168.50.230 netmask 255.255.255.255.248

and why I use as it is already use nat ?.

thanks

biplob

107
Views
0
Helpful
2
Replies