09-04-2007 06:08 AM - edited 03-11-2019 04:06 AM
HI guys
I have a pix 515 with os ver 7.2.2. I want to let users in inside can ping and tracert ip address in internet , who can i do that?
09-04-2007 06:19 AM
permit the following on the inbound acl:
access-list 101 permit icmp any any unreachable
access-list 101 permit icmp any any time-exceeded
access-list 101 permit icmp any any echo-reply
http://www.cisco.com/warp/public/110/pixtrace.html
optionally, enable icmp inspection
09-04-2007 07:21 AM
thak you sir
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide