Newbie PIX question 2

[morganstanleylau]

Hi ,

Anyone can tell me how can i ping the e0 and dmz address , since i can ping e1 and my computer in e1 segment , and the comment is

conduit permit icmp any any

thx

[paddyxdoyle]

If you are trying to ping the actual firewall interface IP address from a different segment, that's not connected to that interface, you can't.

You can only ping a PIX interface if you are on the same network segment or sitting on the PIX itself.

Thanks

Paddy

[morganstanleylau]

Hi Paddy ,

Is it default can't ping the interface in different segment ? No other method can do?

Thx

Stanley

[davecs]

hi,

its not a configurable option - its just not possible..

you cannot ping "through" the PIX to an interface.

cheers

dave