cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
486
Views
0
Helpful
2
Replies

ICMP on pix

behfar_hormozi
Level 1
Level 1

HI guys

I have a pix 515 with os ver 7.2.2. I want to let users in inside can ping and tracert ip address in internet , who can i do that?

2 Replies 2

srue
Level 7
Level 7

permit the following on the inbound acl:

access-list 101 permit icmp any any unreachable

access-list 101 permit icmp any any time-exceeded

access-list 101 permit icmp any any echo-reply

http://www.cisco.com/warp/public/110/pixtrace.html

optionally, enable icmp inspection

thak you sir

Review Cisco Networking for a $25 gift card