PIX ICMP

[skiran]

Hi

here is my network desing

PC-----Router2---------PIX---------Router 1--------outsideworld

I can ping Router 1's interface from the PIX as well as Router2...BUt not from the PC...i even tried giving conduit permit ip any any command also...No natting is taking place...

Y is this?

Regards

Raj

[nchandy]

Hi Raj

when you say no natting,I would think you have the st.

nat (inside) 0 0 0

Now, can the PC ping the PIX's inside interface? Check the route for the PC network on the PIX as well as on the router1.

Thanks

Nisha

[skiran]

Hi nisha

Ya the PC can ping the inside IP addresses of the PIX ....the Route from the PIX to the inside netwrok is fine

We are not using nat as we are using only Public IP addresses....when i ping from my PC to router1and give a debug icmp trace on the PIX i can see outbound ICMP but not inbound...why is that

where am i goin wrong

please help

Raj

[nchandy]

raj

That indicates that tat thr router is not replying back. can you check the route on the router for the PC network

Thanks

Nisha

[rj]

Hi Raj,

A few questions:

1. Is the PC, Router2 and the inside interface of the PIX on the same subnet?

2. When you say not natting, do you mean you use nat 0 for your inside hosts?

3. Can you ping Router1 for Router2?

RJ

[skiran]

Hi

1) ya the PC, Router2 and the inside int are int he same subnet

2)yes ther is no natting all are using public IP addresses

3)ya i can ping from router1 to router2

Regards

Raj

[kefah]

can you print the config of router1? , also make sure on your pc you are not running any Nat Proxy client or services.

Regards,