I have a Cisco ASA Firewall 5516-x Firepower with ASA-Image 9-12-2.
The Device is complet new and i want to allowing ping from outside to Inside and from Inside to Outside.
can you help me?
Solved! Go to Solution.
Here is an example of static NAT, you'll need 1 static NAT entry for each device if you want to ping inbound from the outside. You wouldn't normally do that, unless it was for DMZ hosted services.
object network SWI-1
nat (INSIDE,OUTSIDE) static 18.104.22.168
object network SWI-2
nat (INSIDE,OUTSIDE) static 22.214.171.124
access-list OUTSIDE_IN extended permit icmp any object SWI-1 echo
access-list OUTSIDE_IN extended permit icmp any object SWI-2 echo
If you were just pinging from in inside to outside you would only need 1 dynamic nat rule.