topic Re: PIX 515E & ISA 2004 - Ping issue in Network Security

PIX 515E & ISA 2004 - Ping issue

prashanth15 — Fri, 21 Feb 2020 08:33:13 GMT

Hi,

Pls find the attached diagram.

the requirement is:

1. inside servers should ping pix inside,dmz,outside interface.

2.the server in pix dmz should be able to ping pix dmz,inside,outside interface and all servers inside.

3. from ISA i should be able to ping pix inside,dmz,outside interface and all servers inside.

Pls advice how to configure PIX using version 6.3(4) and 7.0

Regards,

Prashanth

prashanth15 — Wed, 30 Nov 2005 00:29:59 GMT

Hi Friends,

Help me out ASAP.

cheers,

Prashanth

nkhawaja — Wed, 30 Nov 2005 00:41:38 GMT

inside server can only ping inside interface and not any other interface. But should be able to ping any host connected to any other interface.

nkhawaja — Wed, 30 Nov 2005 00:47:19 GMT

>>first you cant ping any other interface of the pix other then your directly connected.

a very basic configuration

nat (inside) 1 0 0

global (outside) 1 interface

global (dmz) 1 interface

static (inside,dmz) 172.16.0.254 172.16.0.254 netmask 255.255.240.0

access-list 100 permit icmp any any

access-group 100 in interface outside

access-group 100 in interface dmz