cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
238
Views
0
Helpful
1
Replies

firewall 515e - Problem with the ping command

admin_2
Level 3
Level 3

I have a sisco firewall 515e, which connect two networks. The A

network is the inside and the B is the outside.The B network has 20 hosts

and a router. The A network hasn't got internet. With the firewall 515e I gave internet to the A network and I allowed the A network to make

ping to the B network. The problem is that I can not make ping from 2 or 3

hosts -not always the same hosts- of the A network to others host of the B network, specifically to the router. Consequently these hosts do not have

internet.

192.0.10.0/24: This is the B network

192.168.0.0/24: This is the A network

192.0.10.254: A router

192.0.10.253: the outside NIC of 515e

192.168.0.250: The inside NIC of 515e

Here is the commands I used to program the 515e:

ip address outside 192.0.10.0.253 255.255.255.0

ip address inside 192.168.0.250 255.255.255.0

route outside 0 0 192.0.10.254 1 (default route)

nat (inside) 1 192.168.0.0 255.255.255.0

global (outside) 1 192.0.10.1-192.0.10.200 netmask 255.255.255.0

conduit permit icmp any any

The problem is that same hosts, 2 or 3, -not always the same- from the A

network can not make ping to the router or any other hosts to the B network.

So I can not give internet to these hosts. Any idea???

1 Reply 1

mostiguy
Level 6
Level 6

Can those problematic hosts always reliably ping the inside interface of the PIX firewall? What do the problematic hosts have in common? Could they be on the same hub or switch?