How to NAT one port and allow ICMP?

[Christie Brinker]

I feel this is a fairly easy straight forward problem. I have a NAT translation from inside,outside and it's to translate 449 to 443, translation is working great and this is all this public IP is used for. Problem is the device on the other end needs to ping the public IP as well. Now I know when you translate by port you cannot ping that public IP. What is the best method to go about here without wasting public IP's by doing 1-to-1 NATs?

Thanks!

[julomban]

Hello Christie,

ICMP is a protocol not a port, you cannot translate a protocol on a NAT rule. The only available option is 1-to-1 NAT and allow the ICMP via the ACL.

Regards,

Juan Lombana

Please rate helpful posts.