cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
385
Views
0
Helpful
3
Replies

ping problem in asa

fb_webuser
Level 6
Level 6

i want to ask about asa 5510

i connect the asa with two pc ( one act as inside and the other act outside ) and i configure the asa

put the problem is .. i cant ping the inside pc from outside and vise versa

i tride many thing that i read in cisco website like

1) enable icmp using acl

2) using policy-map global_policy

but no thing is change

can any one help me please

thank u

---

Posted by WebUser Sumaya Kraishan from Cisco Support Community App

3 Replies 3

Julio Carvajal
VIP Alumni
VIP Alumni

Hello,

Paste configuration and PC addresses

Regards

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

fb_webuser
Level 6
Level 6

this is the running config

ASA Version 8.0(2)

!

hostname ciscoasa

enable password u2AaIZCt5OzuUZet encrypted

names

!

interface Ethernet0/0

nameif outside

security-level 0

ip address 100.100.100.1 255.255.255.0

!

interface Ethernet0/1

nameif inside

security-level 100

ip address 192.168.10.1 255.255.255.0

!

interface Ethernet0/2

shutdown

no nameif

no security-level

no ip address

!

interface Ethernet0/3

shutdown

no nameif

no security-level

no ip address

!

interface Ethernet0/4

shutdown

no nameif

no security-level

no ip address

!

interface Ethernet0/5

shutdown

no nameif

no security-level

no ip address

!

passwd 2KFQnbNIdI.2KYOU encrypted

ftp mode passive

access-list LIST1 extended permit ip any any

access-list LIST2 extended permit ip any any

access-list internal extended permit ip any any

access-list internal extended permit icmp any any

access-list external extended permit icmp any any

access-list external extended permit ip any any

access-list internal1 extended permit ip any any

access-list internal1 extended permit icmp any any

pager lines 24

mtu outside 1500

mtu inside 1500

no failover

icmp unreachable rate-limit 1 burst-size 1

no asdm history enable

arp timeout 14400

global (outside) 1 int

erface

nat (inside) 1 0.0.0.0 0.0.0.0

static (inside,outside) 100.100.100.0 192.168.10.0 netmask 255.255.255.0

access-group internal1 in interface outside

access-group external in interface inside

timeout xlate 3:00:00

timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02

timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00

timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00

timeout uauth 0:05:00 absolute

dynamic-access-policy-record DfltAccessPolicy

no snmp-server location

no snmp-server contact

snmp-server enable traps snmp authentication linkup linkdown coldstart

no crypto isakmp nat-traversal

telnet timeout 5

ssh timeout 5

console timeout 0

threat-detection basic-threat

threat-detection statistics access-list

!

class-map inspection_default

match default-inspection-traffic

!

!

policy-map global_policy

class inspection_default

inspect ftp

inspect h323 h225

inspect h323 ras

inspect rsh

inspect sqlnet

inspect skinny

inspect sunrpc

inspect xdmcp

inspect sip

inspect netbios

inspect tftp

inspect icmp

inspect icmp error

!

service-policy global_policy global

prompt hostname context

Cryptochecksum:00000000000000000000000000000000

: end

ciscoasa(config)#

the pc address is

pc connected withe outside interface 100.100.100.5

pc2 connected with inside interface 192.168.10.5

---

Posted by WebUser Sumaya Kraishan from Cisco Support Community App

Add the following commands:

global (outside) 1 interface

static (inside,outside) 100.100.100.x 192.168.10.5 where the X is an available Ip address on that range

Give it a try and keep me posted

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC
Review Cisco Networking for a $25 gift card