How can I ping a PIX internal interface from another network?
Actually I can ping the PIX Internal Interface from the same network that .e.g (mask 255.255.0.0)
Pix Int. Interface: 10.100.5.12
My Ip : 10.100.0.75
But at my PIX firewall I have another 5 interfaces that I must ping from my Tivoli Netview server, but I can do it because it's on another network. Also I can reach any host of these networks routed by PIX, so I don't have a routing problem...
I've tried to use the <icmp> command with success.
Actually, this is not 100% accurate based on my understanding of the original post. The above will work if you need to ping hosts off a lower security interface. However, I believe the original poster is trying to ping the interface itself from a device located off of another interface. If this is the case, you will not be able to do this. This is by design and is part of the PIX ASA (Adaptive Security Algorithm). Packets must ingress on one interface and egress another interface in order to be passed. The PIX will not redirect packets back out the same interface where it was received.
This has caused a number of problems in other cases such as this. So, I *think* this behavior is changing the in the 7.0 release of PIX which is due out the 2nd half of 2004. I would recommend speaking with your local Cisco acct team to be sure. Hope this helps.
Login to the FXOS chassis manager.
Direct your browser to https://hostname/, and log-in using the user-name and password.
Go to Help > About and check the current version:
Check the current version availa...
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...