ICMP and PIX interfaces

[mburtin]

Hello,

I try to ping all PIX's interfaces from the inside network.

I've got an acl which permit all trafic from inside interface (permit ip any any).

I allow icmp echo and echo-reply from inside network to inside interface (icmp permit <inside_IP_address> <icmp code> inside), the ping is OK.

I allow icmp echo and echo-reply from inside network to other interface (icmp permit <inside_IP_address> <icmp code> outside), the ping is not OK.

Thanks for your help.

[ssdata]

Hi,

this is a PIX "normal" behaviour. You can try to ping the outside router and it should reply (if permitted). But PIX will not not answer when pinging the outside interface (from inside).