pix 525 dmz question

[g-martinez]

I have a domino server segmented on a dmz. I want the inside users 10.160.x.x to be able to ping to 10.161.x.x . I have already tried adding a couple of entries. for example

access-list acl_inbound permit icmp 10.160.0.0 255.255.0.0 10.161.0.0 255.255.255.0

nat (dmz1) 0 10.161.0.0

Any help would be gladly appreciated.

[ccoutts]

Hi,

You will need to allow the ping back from the DMZ, for example:

access-list acl_DMZ permit icmp 10.161.0.0 255.255.255.0 10.160.0.0 255.255.0.0 echo-reply

This should work.

Best Regards,

Charles

[mohammed-alam]

Hi Mate,

if u'r still having problems then please send me a copy of the config (ofcourse remove all the sensitive information). I will call/write back to you soon.

email: moh_alam@hotmail.com

Moh