PIX - enabling PING of inside PIX interface from a host on the outside....

You dont have a static command in place to allow the translation from the outside network to the inside network.

Make the static translation and your good to go.


---------------------------------------------- Posted with NewsLeecher v2.3 Final * Binary Usenet Leeching Made Easy *

formatting link

Reply to
Loading thread data ...

Fairly new to CISCO PIX so forgive me if I'm asking the obvious...

I have a PIX that i want to configure to allow pinging of the inside PIX interface from a host located on the PIX outside interface....

My config allows icmp any from the entire subnet on the outside interface to the entire subnet on the inside interface - since the inside subnet covers the inside interface I'd have thought this would have worked, but it doesnt.

I can ping any host on the inside interface subnet from the outside host, but not the actual inside interface itself.....

In the log I'm getting:-

PIX-3-305005: No translation group found for icmp src outside: dst inside: (type 8, code0) is the outside host, connecting via the PIX outside interface, is the inside PIX interface.

Any help greatly appreciated.

Reply to

If your using the pix to segment two LANs then you can use the ICMP command:

[no] icmp {permit | deny} ip_address net_mask [icmp_type] if_name

If your using this firewall on the internet perimeter you'll have to create a static NAT entry and then create a access-list to allow outside to inside connections:

access-list 10 permit any host aaa.bbb.ccc.ddd eq echo-reply

aaa.bbb.ccc.ddd equals the ip address of your inside interface.

Reply to

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.