Unable to ping from DMZ to host inside interface of ASA

[mahesh18]

Hi Everyone,

PC is connected to inside of ASA.

From DMZ  PC  i am trying to ping the inside host IP  no luck.

From inside host i can ping the DMZ  host   once i config the command

global(DMZ) 1 interface.

Do i need to config the command

global(inside) 1 interface so that i can ping from DMZ  host to Inside host?

Thanks

MAhesh

[Jouni Forss · Accepted solution]

Hi,

Its supposed to be Type 8 and Code 0

I originally had it Type 0 Code 8

The "packet-tracer" command first expects the ICMP Type and then the ICMP Code

For example from my ASA

ICMP Type

ASA(config)# packet-tracer input LAN icmp 10.0.0.10 ?

exec mode commands/options:

  <0-255>  Enter the icmp type

ICMP Code

ASA(config)# packet-tracer input LAN icmp 10.0.0.10 8 ?

exec mode commands/options:

  <0-255>  Enter the icmp code

Here is more information about the Type and Codes of ICMP

http://www.iana.org/assignments/icmp-parameters/icmp-parameters.xml

- Jouni

[mahesh18]

Hi Jouni,

Seems this is good enough for todays question and answers.

I will go through todays post few times so i can be more comfortable.

Regards

Mahesh