topic Re: PIX ICMP in Network Security

PIX ICMP

skiran — Fri, 21 Feb 2020 06:48:44 GMT

here is my network desing

PC-----Router2---------PIX---------Router 1--------outsideworld

I can ping Router 1's interface from the PIX as well as Router2...BUt not from the PC...i even tried giving conduit permit ip any any command also...No natting is taking place...

Y is this?

Regards

Raj

Re: PIX ICMP

nchandy — Fri, 20 Jun 2003 05:51:12 GMT

Hi Raj

when you say no natting,I would think you have the st.

nat (inside) 0 0 0

Now, can the PC ping the PIX's inside interface? Check the route for the PC network on the PIX as well as on the router1.

Thanks

Nisha

Re: PIX ICMP

rj — Fri, 20 Jun 2003 05:51:33 GMT

Hi Raj,

A few questions:

1. Is the PC, Router2 and the inside interface of the PIX on the same subnet?

2. When you say not natting, do you mean you use nat 0 for your inside hosts?

3. Can you ping Router1 for Router2?

Re: PIX ICMP

skiran — Fri, 20 Jun 2003 06:04:29 GMT

1) ya the PC, Router2 and the inside int are int he same subnet

2)yes ther is no natting all are using public IP addresses

3)ya i can ping from router1 to router2

Regards

Raj

Re: PIX ICMP

skiran — Fri, 20 Jun 2003 06:07:06 GMT

Hi nisha

Ya the PC can ping the inside IP addresses of the PIX ....the Route from the PIX to the inside netwrok is fine

We are not using nat as we are using only Public IP addresses....when i ping from my PC to router1and give a debug icmp trace on the PIX i can see outbound ICMP but not inbound...why is that

where am i goin wrong

please help

Raj

Re: PIX ICMP

nchandy — Fri, 20 Jun 2003 17:27:58 GMT

raj

That indicates that tat thr router is not replying back. can you check the route on the router for the PC network

Thanks

Nisha

Re: PIX ICMP

kefah — Sat, 21 Jun 2003 06:25:55 GMT

can you print the config of router1? , also make sure on your pc you are not running any Nat Proxy client or services.

Regards,