cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
559
Views
2
Helpful
5
Replies

Cisco ASA 5525x DNAT configuration for icmp echo

CiscoJane
Level 1
Level 1

Hello all,

I need some helps regarding Cisco ASA 5525X DNAT for icmp echo. Our organization want to use icmp echo reply from a public ip address which translated to internal server for some reason. I have no idea how to configure DNAT for icmp at ASA. 

i cannot define the following information, when i add icmp type (0), it does not work, cannot get any reply.

CiscoJane_0-1699345667934.png

Thanks much for any response.

5 Replies 5

4.23.png
there is type and code 
the request is 8 0 
the reply is 0 0

Thanks A Lot
MHM

when i write DNAT rules using your provided information. it is saying this error as belows.

CiscoJane_0-1699851470234.png

here is my icmp object

CiscoJane_1-1699851526666.pngCiscoJane_2-1699851533710.png

 

sorry can you write the NAT you want here to apply 
write it as CLI and I guide you to apply via ASDM 

Thanks A Lot
MHM

CiscoJane_0-1699935280236.png

here is my scenario, pls help. thanks.

You would need something similar to this to be able to ping the internal server with its public ip and get the replies sourcing from the private ip:

nat (inside,any) source static ap-private-IP ap-public-IP

nat (inside,outside) source dynamic lan interface

or

nat (inside,inside) source static ap-private-IP ap-public-IP

nat (inside,outside) source static ap-private-IP ap-public-IP

nat (inside,outside) source dynamic lan interface

Review Cisco Networking for a $25 gift card