Help with access-list error on PIX
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-12-2011 05:01 AM - edited 03-11-2019 01:32 PM
Hi Guys
I am not able to ping from 10.140.1.129 to 10.120.1.1 and getting following error msg on pix.
Deny icmp src abc_dmz 10.140.1.129 dst inside 10.120.1.1 (type 8, code 0) byaccess-group "ACL_abc
I already have access list from 10.140.1.129 to 10.120.1.1 allowing echo and echo-reply the otherway. Not sure why getting this msg. Any help will be really appreciated.
Tks
- Labels:
-
NGFW Firewalls

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-12-2011 05:16 AM
Hi Kuldeep,
Can you plz provide the following outputs from ASA:
the access-list that you have created
show run access-list ACL_abc
show run access-group
show run nat
show run global
This info would be really helpful in troubleshooting the issue.
Thanks,
Varun
Varun Rao
