topic Re: pix 515E in Network Security https://community.cisco.com/t5/network-security/pix-515e/m-p/488267#M531088 <HTML><HEAD></HEAD><BODY><P>Are the interface in "up" state ?</P><P></P><P></P><P>sh int e0</P><P>sh int e1</P><P></P><P></P><P>int e0 auto</P><P>int e1 auto</P><P></P><P>ip address inside &lt;&gt; &lt;&gt;</P><P>ip address outside &lt;&gt; &lt;&gt;</P><P></P><P>ping <IP address="" of="" inside=""></IP></P><P></P><P></P><P>See if that helps.</P><P></P><P></P></BODY></HTML> Thu, 03 Nov 2005 17:30:12 GMT thisisshanky 2005-11-03T17:30:12Z pix 515E https://community.cisco.com/t5/network-security/pix-515e/m-p/488266#M531086 <P>Hi,</P><P>I have pix 515E for some reason I can't ping non interfaces nor inside to outside and nor outside to inside. any suggestions?</P><P>Help needed</P><P></P> Fri, 21 Feb 2020 08:30:18 GMT https://community.cisco.com/t5/network-security/pix-515e/m-p/488266#M531086 barry-goldberg 2020-02-21T08:30:18Z Re: pix 515E https://community.cisco.com/t5/network-security/pix-515e/m-p/488267#M531088 <HTML><HEAD></HEAD><BODY><P>Are the interface in "up" state ?</P><P></P><P></P><P>sh int e0</P><P>sh int e1</P><P></P><P></P><P>int e0 auto</P><P>int e1 auto</P><P></P><P>ip address inside &lt;&gt; &lt;&gt;</P><P>ip address outside &lt;&gt; &lt;&gt;</P><P></P><P>ping <IP address="" of="" inside=""></IP></P><P></P><P></P><P>See if that helps.</P><P></P><P></P></BODY></HTML> Thu, 03 Nov 2005 17:30:12 GMT https://community.cisco.com/t5/network-security/pix-515e/m-p/488267#M531088 thisisshanky 2005-11-03T17:30:12Z Re: pix 515E https://community.cisco.com/t5/network-security/pix-515e/m-p/488268#M531091 <HTML><HEAD></HEAD><BODY><P>Ping is not a stateful protocol. To allow pings from the inside to the outside interface you need to create an access-list. If you want to ping the same interface that you are physicly connected you need to configure the "icmp" command.</P><P></P><P>example:</P><P>See: Handling ICMP Pings with the PIX Firewall</P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a0080094e8a.shtml" target="_blank">http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a0080094e8a.shtml</A></P><P></P><P>The PIX and the traceroute Command</P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a00800e9312.shtml" target="_blank">http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a00800e9312.shtml</A></P><P></P><P>examples:</P><P></P><P>Traveroute</P><P></P><P>Microsoft:</P><P>access-group 101 in interface outside</P><P>access-list 101 permit icmp any host YourPublicIP unreachable</P><P>access-list 101 permit icmp any host YourPublicIP time-exceeded</P><P>access-list 101 permit icmp any host YourPublicIP echo-reply</P><P></P><P>UNIX:</P><P>access-group 101 in interface outside</P><P>access-list 101 permit icmp any host YourPublicIP unreachable</P><P>access-list 101 permit icmp any host YourPublicIP time-exceeded</P><P></P><P>ICMP command example</P><P>icmp deny any outside</P><P>icmp permit any echo-reply outside</P><P>icmp permit any echo-reply inside</P><P>icmp permit host 192.168.1.30 echo inside</P><P>icmp permit host 192.168.1.31 echo inside</P><P>icmp permit host 192.168.1.20 echo inside</P><P>icmp permit host 192.168.1.40 echo inside</P><P>icmp permit host 192.168.1.100 echo inside</P><P></P><P>sincerely</P><P>Patrick</P></BODY></HTML> Thu, 03 Nov 2005 17:43:12 GMT https://community.cisco.com/t5/network-security/pix-515e/m-p/488268#M531091 Patrick Iseli 2005-11-03T17:43:12Z Re: pix 515E https://community.cisco.com/t5/network-security/pix-515e/m-p/488269#M531093 <HTML><HEAD></HEAD><BODY><P>yes, they are up and running</P></BODY></HTML> Thu, 03 Nov 2005 22:06:18 GMT https://community.cisco.com/t5/network-security/pix-515e/m-p/488269#M531093 barry-goldberg 2005-11-03T22:06:18Z