Re: Allow pinging the outside interface through the ASA from

Same thing.
To get from the inside to the outside interface, you have to cross the
policy both ways.
So either let the echo replies (you may explicitly permit the IF IP
address if you want) or let ASA fake an ICMP connection by doing
inspection.

-Carlos

Amin @ 10/02/2011 19:29 -0300 dixit:
> I mean pining the ip address of the outside interface of the ASA from the
> inside, not allow the ping to pass through.
>
> -----Original Message-----
> From: Carlos G Mendioroz [mailto:tron_at_huapi.ba.ar]
> Sent: Thursday, February 10, 2011 3:37 AM
> To: Amin
> Cc: ccielab_at_groupstudy.com
> Subject: Re: Allow pinging the outside interface through the ASA from the
> inside network
>
> Either let echo reply come back, or enable icmp connections (inspection).
>
> http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note0918
> 6a0080094e8a.shtml
>
> -Carlos
>
> Amin @ 10/02/2011 18:03 -0300 dixit:
>> Hi experts,
>>
>> How I can configure to ping my outside interface form the inside network.
>>
>> Regards,
>>
>> Amin
>>
>>
>>
>>
>>
>> Amin
>>
>> AXIZO.COM
>>
>> Previously name Horizon
>>
>> ' +970-2-2988128 | 7 +970-2-2988128 |P +970-59-9367950 | .
>> <mailto:gila_at_lan-tech.co.il> amin_at_axizo.com
>>
>>
>> Blogs and organic groups at http://www.ccie.net
>>
>> ______________________________________________________________________
>> _ Subscription information may be found at:
>> http://www.groupstudy.com/list/CCIELab.html
>>
>>
>>
>>
>>
>>
>>
>
> --
> Carlos G Mendioroz <tron_at_huapi.ba.ar> LW7 EQI Argentina
>

-- 
Carlos G Mendioroz  <tron_at_huapi.ba.ar>  LW7 EQI  Argentina
Blogs and organic groups at http://www.ccie.net