topic Ping through PIX515 in Network Security

Ping through PIX515

pepetreshere — Mon, 11 Mar 2019 09:58:48 GMT

I'm trying to allow ping from the inside to the dmz zone. For this I have configured an ACL allowing all icmp traffic and applied it to the dmz interface, but it doesn't works. What would be the problem?

I have started from the default configuration and added only the following lines

interface ethernet0 auto

interface ethernet1 auto

nameif ethernet0 inside security100

nameif ethernet1 dmz security60

access-list dmz_in permit icmp any any

access-list dmz_in permit ip any any

ip address inside 10.29.40.9 255.255.255.0

ip address dmz 192.168.23.14 255.255.255.0

access-group dmz_in in interface dmz

Re: Ping through PIX515

srue — Wed, 11 Apr 2007 14:56:10 GMT

can you pass other traffic to the dmz, besides icmp? if not, this might be a NAT issue. if you don't need nat from inside-> dmz, use something like the following:

static (inside,dmz) 192.168.1.1 192.168.1.1

where 192.168.1.1 is whatever host is on the inside that you're ping from.

Re: Ping through PIX515

mark.hodge — Wed, 11 Apr 2007 16:49:12 GMT

You probably need to apply a nat ( inside ) 0 statement. You could also use a static map from the inside to the dmz network.