Re: PiX Nat

From: Danshtr (danshtr@gmail.com)
Date: Sun May 08 2005 - 07:19:10 GMT-3

• Next message: Gary Cheung: "Missing command in both CCO IOS 12.2 and 12.3"
• Previous message: Long Kwok: "Difference within the MQC framework of set dscp and set ip dscp"
• Maybe in reply to: Serge N'GBESSO: "PiX Nat"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

version 7 will do the job (icmp state tracking). and no need for nat 0 anymore

On 5/7/05, Serge N'GBESSO <sergeng@yahoo.fr> wrote:
> I want users on the inside to be able to ping outside throught the pix :
> <
> nat (i) 1 0 0
> global (o) interface
> access-li INB permit icmp any any echo-reply
> >
>
> WHY do i need the access-li since the ASA should dynamicaly allow the return traffic ?
>
>
> ---------------------------------
> Dicouvrez le nouveau Yahoo! Mail : 250 Mo d'espace de stockage pour vos mails !
> Criez votre Yahoo! Mail
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>

-- 
Best regards,
Dan

• Next message: Gary Cheung: "Missing command in both CCO IOS 12.2 and 12.3"
• Previous message: Long Kwok: "Difference within the MQC framework of set dscp and set ip dscp"
• Maybe in reply to: Serge N'GBESSO: "PiX Nat"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.4 : Fri Jun 03 2005 - 10:11:57 GMT-3