Ping Problems through Pix

[aceadmin]

We want to enable some customers that are NATed off te inside 10.0.0.0 network to be able to ping and traceroute to destinations outside the Pix. They can traverse the Pix for all other traffic, such as web and email. Customers on the public networs, like 1.1.1.0 and 2.2.2.2 are able to ping and traceroute fine. After searching the forums, I was not able to find a solution. I would greatly appreciate any advice or help you can give!

Thank you,

Brian

[aceadmin]

Sorry,

I forgot to attach the config. Here it is.

Thanks,

Brian

[jackko]

have you try the command "deb icmp t"? it's easier to read through the config.

the result of the debug should help as it outlines whether the request has been received from the pix and whether the response has been received. also the xlate will be indicated.