cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3178
Views
0
Helpful
1
Replies

Missing the inbound icmp connection

Ramesh Chauhan
Level 1
Level 1

I have configured the below access-list

access-list outside permit icmp any any

access-list outside permit udp any any

access-group outside in interface in outside

But from the below logging message it seems the inbound ICMP connection is not getting built up

%ASA-7-609001: Built local-host outside:10.3.1.1

%ASA-6-302020: Built outbound ICMP connection for faddr 10.3.1.1/0 gaddr 10.40.1.1/232 laddr 10.40.1.1/232

%ASA-6-302021: Teardown ICMP connection for faddr 10.3.1.1/0 gaddr 10.40.1.1/232 laddr 10.40.1.1/232

%ASA-7-609002: Teardown local-host outside:10.3.1.1 duration 0:00:10

%ASA-7-609001: Built local-host outside:10.3.1.1

%ASA-6-302020: Built outbound ICMP connection for faddr 10.3.1.1/0 gaddr 10.40.1.1/233 laddr 10.40.1.1/233

%ASA-6-302021: Teardown ICMP connection for faddr 10.3.1.1/0 gaddr 10.40.1.1/233 laddr 10.40.1.1/233

%ASA-7-609002: Teardown local-host outside:10.3.1.1 duration 0:00:10

Here I can see outbound ICM connection from 10.40.1.1 to 10.3.1.1 but no inbound connection.

Traffic from 10.40.1.1 to 10.3.1.1 is a voice traffic.

Can someone suggest what is missing?

1 Reply 1

Ramesh Chauhan
Level 1
Level 1

On the packet tracer this traffic is allowed.