topic Re: ACL Issue in Network Security

ACL Issue

chaitu_kranthi — Mon, 11 Mar 2019 15:58:41 GMT

Hi,

We have a ASA box with the following interface configuration.

interface GigabitEthernet0/1

nameif EXT_CR1_41

security-level 50

ip address 10.52.237.246 255.255.255.248

interface GigabitEthernet0/3

nameif ASA_OC_40

security-level 100

ip address 10.52.237.250 255.255.255.248

i have a router in EXT_CR1_41 interface range.

i can able to ping this device from the ASA, but not from the inside range (ASA_OC_40).

i think i have not applied right acl.

Can some one please help in this issue.

i need the ICMP/telnet access to the router which is in EXT_CR1_41 interface range.

and i am setting in ASA_OC_40 range.

lm20ele — Thu, 23 Jul 2009 20:49:53 GMT

Hi,

From where are you originating your pings?

How does you access-list look like?

jwalker — Thu, 23 Jul 2009 21:28:24 GMT

You need to allow the icmp echo replies back into your DMZ interface

access-list icmp_test extended permit icmp any any echo-reply

access-group icmp_test in interface EXT_CR1_41