asa ping

[daliaelmassery]

i have an ASA 5500 firewall and i need to ping from hosts in inside interface to outside interface

[Jon Marshall]

Hi

Do you mean ping hosts that are on the other side of the ASA or do you mean ping the outside interface of the ASA ?

Jon

[daliaelmassery]

hi

thank you for replying

please i want both cases, ping the outside interface of ASA, and ping hosts that are on the other side of ASA

thanks

[gwong]

You would need an access-list for your outside interface allowing icmp-reply any any and if you have an access-list on your inside interface, you would need to allow icmp-request through for which ever subnet or host you deem necessary.

If you like this review, please rate it.

[acharyr123]

Hello,

In asa "icmp permit any inside" & "icmp permit any outside" are by default enabled. But in this case you need to cofigure the following commands:

access-list 110 extended permit icmp any any

access-group 110 in interface inside

access-group 110 in interface outside

if you like tis please rate as well.