Re: Allow pinging the outside interface through the ASA from

It is not possible at all but you can ping outside interface with
its(outside) directly connected host (security reason) where as it is
possible in other firewalls by permission .

Thanks
Shahid Ansari
Solution Architect
CCIE#20017
Kuwait

On Thu, Feb 10, 2011 at 4:48 PM, Radioactive Frog <pbhatkoti_at_gmail.com>wrote:

> Agreed with Piotr.
>
> On Fri, Feb 11, 2011 at 12:38 AM, Piotr Matusiak <pitt2k_at_gmail.com> wrote:
>
> > Amin,
> >
> > By design, this is not possible. The host can ping only directly
> connected
> > interface.
> >
> > HTH,
> > --
> > Piotr Matusiak
> > CCIE #19860 (R&S, Security), CCSI #33705
> > Technical Instructor
> > website: www.MicronicsTraining.com
> > blog: www.ccie1.com
> >
> > If you can't explain it simply, you don't understand it well enough -
> > Albert Einstein
> >
> >
> > 2011/2/10 Amin <amin_at_axizo.com>
> >
> > > I mean pining the ip address of the outside interface of the ASA from
> the
> > > inside, not allow the ping to pass through.
> > >
> > > -----Original Message-----
> > > From: Carlos G Mendioroz [mailto:tron_at_huapi.ba.ar]
> > > Sent: Thursday, February 10, 2011 3:37 AM
> > > To: Amin
> > > Cc: ccielab_at_groupstudy.com
> > > Subject: Re: Allow pinging the outside interface through the ASA from
> the
> > > inside network
> > >
> > > Either let echo reply come back, or enable icmp connections
> (inspection).
> > >
> > >
> > >
> >
> >
> http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note0918
> > >
> > 6a0080094e8a.shtml<
> > http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/prod
> > ucts_tech_note0918%0A6a0080094e8a.shtml<
> http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/prod%0Aucts_tech_note0918%0A6a0080094e8a.shtml
> >
> > >
> > >
> > > -Carlos
> > >
> > > Amin @ 10/02/2011 18:03 -0300 dixit:
> > > > Hi experts,
> > > >
> > > > How I can configure to ping my outside interface form the inside
> > network.
> > > >
> > > > Regards,
> > > >
> > > > Amin
> > > >
> > > >
> > > >
> > > >
> > > >
> > > > Amin
> > > >
> > > > AXIZO.COM
> > > >
> > > > Previously name Horizon
> > > >
> > > > ' +970-2-2988128 <+97022988128> | 7 +970-2-2988128 <+97022988128> |P
> +970-59-9367950 <+970599367950> | .
> > > > <mailto:gila_at_lan-tech.co.il> amin_at_axizo.com
> > > >
> > > >
> > > > Blogs and organic groups at http://www.ccie.net
> > > >
> > > >
> ______________________________________________________________________
> > > > _ Subscription information may be found at:
> > > > http://www.groupstudy.com/list/CCIELab.html
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > >
> > > --
> > > Carlos G Mendioroz <tron_at_huapi.ba.ar> LW7 EQI Argentina
> > >
> > >
> > > Blogs and organic groups at http://www.ccie.net
> > >
> > > _______________________________________________________________________
> > > Subscription information may be found at:
> > > http://www.groupstudy.com/list/CCIELab.html
> >
> >
> > Blogs and organic groups at http://www.ccie.net
> >
> > _______________________________________________________________________
> > Subscription information may be found at:
> > http://www.groupstudy.com/list/CCIELab.html
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Thu Feb 10 2011 - 16:57:08 ART