topic pix 525 dmz question in Network Security

pix 525 dmz question

g-martinez — Fri, 21 Feb 2020 06:06:29 GMT

I have a domino server segmented on a dmz. I want the inside users 10.160.x.x to be able to ping to 10.161.x.x . I have already tried adding a couple of entries. for example

access-list acl_inbound permit icmp 10.160.0.0 255.255.0.0 10.161.0.0 255.255.255.0

nat (dmz1) 0 10.161.0.0

Any help would be gladly appreciated.

Re: pix 525 dmz question

ccoutts — Fri, 21 Jun 2002 07:18:11 GMT

Hi,

You will need to allow the ping back from the DMZ, for example:

access-list acl_DMZ permit icmp 10.161.0.0 255.255.255.0 10.160.0.0 255.255.0.0 echo-reply

This should work.

Best Regards,

Charles

Re: pix 525 dmz question

mohammed-alam — Wed, 26 Jun 2002 19:18:41 GMT

Hi Mate,

if u'r still having problems then please send me a copy of the config (ofcourse remove all the sensitive information). I will call/write back to you soon.

email: moh_alam@hotmail.com

Moh