topic Re: pix515 no resolution from inside in Network Security https://community.cisco.com/t5/network-security/pix515-no-resolution-from-inside/m-p/785693#M977608 <HTML><HEAD></HEAD><BODY><P>Is it possible to see a configuration?</P></BODY></HTML> Wed, 27 Jun 2007 06:52:55 GMT timkaye 2007-06-27T06:52:55Z pix515 no resolution from inside https://community.cisco.com/t5/network-security/pix515-no-resolution-from-inside/m-p/785691#M977606 <P>I configured a pix 515. users in the lan can ping machine on the internet but cannot load any internet pages. pc on the lan have the right dns server.</P><P>please how can i resolv the dns problem ?</P> Mon, 11 Mar 2019 10:35:48 GMT https://community.cisco.com/t5/network-security/pix515-no-resolution-from-inside/m-p/785691#M977606 dom.a 2019-03-11T10:35:48Z Re: pix515 no resolution from inside https://community.cisco.com/t5/network-security/pix515-no-resolution-from-inside/m-p/785692#M977607 <HTML><HEAD></HEAD><BODY><P>Is there an acl on the inside interface?</P></BODY></HTML> Tue, 26 Jun 2007 15:37:12 GMT https://community.cisco.com/t5/network-security/pix515-no-resolution-from-inside/m-p/785692#M977607 acomiskey 2007-06-26T15:37:12Z Re: pix515 no resolution from inside https://community.cisco.com/t5/network-security/pix515-no-resolution-from-inside/m-p/785693#M977608 <HTML><HEAD></HEAD><BODY><P>Is it possible to see a configuration?</P></BODY></HTML> Wed, 27 Jun 2007 06:52:55 GMT https://community.cisco.com/t5/network-security/pix515-no-resolution-from-inside/m-p/785693#M977608 timkaye 2007-06-27T06:52:55Z Re: pix515 no resolution from inside https://community.cisco.com/t5/network-security/pix515-no-resolution-from-inside/m-p/785694#M977609 <HTML><HEAD></HEAD><BODY><P>hi,</P><P></P><P>Yes, just one to permit ping :</P><P>access-list ping_acl permit icmp any any</P><P>access-group ping_acl in interface inside</P><P></P><P>Find attached the configuration file.</P><P></P><P>Regards</P><P></P><P> </P><P></P></BODY></HTML> Wed, 27 Jun 2007 07:23:34 GMT https://community.cisco.com/t5/network-security/pix515-no-resolution-from-inside/m-p/785694#M977609 dom.a 2007-06-27T07:23:34Z Re: pix515 no resolution from inside https://community.cisco.com/t5/network-security/pix515-no-resolution-from-inside/m-p/785695#M977610 <HTML><HEAD></HEAD><BODY><P>Yes, please find attached the configuration file.</P><P></P><P>Regards</P><P></P><P> </P><P></P></BODY></HTML> Wed, 27 Jun 2007 07:25:38 GMT https://community.cisco.com/t5/network-security/pix515-no-resolution-from-inside/m-p/785695#M977610 dom.a 2007-06-27T07:25:38Z Re: pix515 no resolution from inside https://community.cisco.com/t5/network-security/pix515-no-resolution-from-inside/m-p/785696#M977612 <HTML><HEAD></HEAD><BODY><P>Hello.</P><P></P><P>The ping_acl is your problem.</P><P></P><P>You will need to add a line allowing users port 80 connections out (there maybe other ports required also)</P><P></P><P>Tim</P></BODY></HTML> Wed, 27 Jun 2007 07:32:19 GMT https://community.cisco.com/t5/network-security/pix515-no-resolution-from-inside/m-p/785696#M977612 timkaye 2007-06-27T07:32:19Z Re: pix515 no resolution from inside https://community.cisco.com/t5/network-security/pix515-no-resolution-from-inside/m-p/785697#M977613 <HTML><HEAD></HEAD><BODY><P>ok,</P><P></P><P>addind a line like with an acl? how ?</P><P></P><P>access-list out_acl permit tcp inside-network any eq 80</P><P></P><P>is it correct ?</P><P></P><P>Regards</P></BODY></HTML> Wed, 27 Jun 2007 07:45:48 GMT https://community.cisco.com/t5/network-security/pix515-no-resolution-from-inside/m-p/785697#M977613 dom.a 2007-06-27T07:45:48Z Re: pix515 no resolution from inside https://community.cisco.com/t5/network-security/pix515-no-resolution-from-inside/m-p/785698#M977614 <HTML><HEAD></HEAD><BODY><P>no access-list ping_acl permit icmp any any</P><P>no access-group ping_acl in interface inside</P><P></P><P>You do not need this acl to allow ping from the inside interface. Removing this acl will solve your dns problems etc. If you want to ping to the outside you only need to allow the reply in the outside interface acl like so...</P><P></P><P>access-list acl_out permit icmp any any echo-reply</P><P></P><P>Please rate if this helps.</P></BODY></HTML> Wed, 27 Jun 2007 11:51:51 GMT https://community.cisco.com/t5/network-security/pix515-no-resolution-from-inside/m-p/785698#M977614 acomiskey 2007-06-27T11:51:51Z