I ve a real problem configuring acl on the ASA 8.0(3)
it is just a single acl that i m trying
(config) access-list OUTSIDE extended deny icmp any any (config) access-group OUTSIDE in interface outside
but still from interent i can ping.
i m sure that outside is "outside".
is here anything i miss ?
e.g.
interface GigabitEthernet0/0 nameif outside security-level 0 access-group outside in interface outside
This should do the trick.
Hi,
ACLs' names are case-sensitive. Have you checked it?
Giorgos
nini schrieb:
if you want to disable ICMP to your outside interface use
icmp deny any outside
Jens
as you said alln, the commands were right, outisde is outside and I considered case sensitiveness but the asa wont apply any of the acl, the icmp one i just mention was xcoorect, but it donesnt consider any other as well. maybe there is a basic command to allow it to frewall or something. i really dont know.
Even with the asdm, the only implicit rule i sot deny ip any to any. since i can ping from outside.
Have something to add? Share your thoughts — no account required.
Ask the community — no account required