topic Re: Allowing Ping in Network Security

Allowing Ping

AliRezaMirzaei0031 — Wed, 14 Aug 2019 07:38:34 GMT

Hello,

I have a Cisco ASA Firewall 5516-x Firepower with ASA-Image 9-12-2.

The Device is complet new and i want to allowing ping from outside to Inside and from Inside to Outside.

can you help me?

thanks

Re: Allowing Ping

balaji.bandi — Wed, 14 Aug 2019 07:45:08 GMT

You can have accessl-list like below in to out and out in for ICMP to allow.

access-list acl-in-out extended permit icmp any any echo-reply

access-list acl-in-out extended permit icmp any any time-exceeded

Re: Allowing Ping

Rob Ingram — Wed, 14 Aug 2019 07:45:13 GMT

Hi,
Use the command "fixup protocol icmp" to enable inspection for icmp, this will allow icmp requests from inside to outside to be permitted. If you want to ping from the outside to inside, it depends, you would probably need to create a static NAT and then permit the traffic on the inbound ACL on the outside interface.

HTH

Re: Allowing Ping

AliRezaMirzaei0031 — Wed, 14 Aug 2019 08:19:18 GMT

perfect,

and can you write please the commands for NAT and ACL.

i want to all ip from outside can ping all ip to inside .

thanks

Re: Allowing Ping

Rob Ingram — Wed, 14 Aug 2019 08:54:56 GMT

Hi,

Here is an example of static NAT, you'll need 1 static NAT entry for each device if you want to ping inbound from the outside. You wouldn't normally do that, unless it was for DMZ hosted services.

object network SWI-1
 host 10.10.0.1
 nat (INSIDE,OUTSIDE) static 1.1.1.111

object network SWI-2
 host 10.10.1.1
 nat (INSIDE,OUTSIDE) static 1.1.1.112

access-list OUTSIDE_IN extended permit icmp any object SWI-1 echo
access-list OUTSIDE_IN extended permit icmp any object SWI-2 echo

If you were just pinging from in inside to outside you would only need 1 dynamic nat rule.

HTH

Re: Allowing Ping

AliRezaMirzaei0031 — Wed, 14 Aug 2019 09:34:52 GMT

do i Need Access-Group then?

Re: Allowing Ping

Rob Ingram — Wed, 14 Aug 2019 09:36:55 GMT

Yes.

access-group OUTSIDE_IN in interface Outside