topic Re: Access List for ICMP traffic to server on DMZ in Network Security https://community.cisco.com/t5/network-security/access-list-for-icmp-traffic-to-server-on-dmz/m-p/838433#M956084 <HTML><HEAD></HEAD><BODY><P>Generaly from Internet to DMZ you need permit ICMP echo (ping) and from DMZ to Internet you need to permit ICMP echo-reply (ping respose) </P><P>On firewall</P><P>access-list out_dmz permit icmp any host Public_IP_of_server echo</P><P></P><P>access-list dmz_out permit icmp host private_IP_of_server any echo-reply</P><P></P><P>On router it should be similar in the direction public - private echo in the direction private - public echo-reply</P><P></P><P></P></BODY></HTML> Tue, 29 Jan 2008 15:46:51 GMT m.sir 2008-01-29T15:46:51Z Access List for ICMP traffic to server on DMZ https://community.cisco.com/t5/network-security/access-list-for-icmp-traffic-to-server-on-dmz/m-p/838432#M956080 <P>If I had a server on the DMZ with a static nat, could someone give me a rough example of what the access list line would look on the firewall AND outside router if I wanted to allow anyone from the Internet to ping it and have it reply.</P> Mon, 11 Mar 2019 11:55:23 GMT https://community.cisco.com/t5/network-security/access-list-for-icmp-traffic-to-server-on-dmz/m-p/838432#M956080 thomas.reiling 2019-03-11T11:55:23Z Re: Access List for ICMP traffic to server on DMZ https://community.cisco.com/t5/network-security/access-list-for-icmp-traffic-to-server-on-dmz/m-p/838433#M956084 <HTML><HEAD></HEAD><BODY><P>Generaly from Internet to DMZ you need permit ICMP echo (ping) and from DMZ to Internet you need to permit ICMP echo-reply (ping respose) </P><P>On firewall</P><P>access-list out_dmz permit icmp any host Public_IP_of_server echo</P><P></P><P>access-list dmz_out permit icmp host private_IP_of_server any echo-reply</P><P></P><P>On router it should be similar in the direction public - private echo in the direction private - public echo-reply</P><P></P><P></P></BODY></HTML> Tue, 29 Jan 2008 15:46:51 GMT https://community.cisco.com/t5/network-security/access-list-for-icmp-traffic-to-server-on-dmz/m-p/838433#M956084 m.sir 2008-01-29T15:46:51Z Re: Access List for ICMP traffic to server on DMZ https://community.cisco.com/t5/network-security/access-list-for-icmp-traffic-to-server-on-dmz/m-p/838434#M956087 <HTML><HEAD></HEAD><BODY><P>I'm not sure I understand the placement of the firewall access-lists since there is the outside interface and the dmz interface where the server resides. Can you explain that better? Thank you.</P></BODY></HTML> Tue, 29 Jan 2008 20:37:21 GMT https://community.cisco.com/t5/network-security/access-list-for-icmp-traffic-to-server-on-dmz/m-p/838434#M956087 thomas.reiling 2008-01-29T20:37:21Z