Help with access-list error on PIX

[kuldeep.kaur]

Hi Guys

I am not able to ping from 10.140.1.129 to 10.120.1.1 and getting following error msg on pix.

Deny icmp src abc_dmz 10.140.1.129 dst inside 10.120.1.1 (type 8, code 0) byaccess-group "ACL_abc

I already have access list from 10.140.1.129 to 10.120.1.1 allowing echo and echo-reply the otherway. Not sure why getting this msg. Any help will be really appreciated.

Tks

[varrao]

Hi Kuldeep,

Can you plz provide the following outputs from ASA:

the access-list that you have created

show run access-list ACL_abc

show run access-group

show run nat

show  run global

This info would be really helpful in troubleshooting the issue.

Thanks,

Varun