Announcement

Collapse
No announcement yet.

Ping own wan IP from inside on ASA 5505

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Ping own wan IP from inside on ASA 5505

    Hi

    I have a asa5505 with 2 ISP. I want te be able to ping my own wan IP form the inside network. I don't use DMZ.

    Hope any one can help

    Kind regards,

    Maarten

  • #2
    Re: Ping own wan IP from inside on ASA 5505

    Have a quick read of this:
    http://www.cisco.com/en/US/products/...80094e8a.shtml

    I believe you may need to configure the management-access
    cheers
    Andy

    Please read this before you post:


    Quis custodiet ipsos custodes?

    Comment


    • #3
      Re: Ping own wan IP from inside on ASA 5505

      Hi Andy,

      Thanks for the respons. Unfortant this was not the solution. All ping traffic is allowed. I use the asa 5505 with 2 ISP's

      Kind regards,

      Maarten

      Comment


      • #4
        Re: Ping own wan IP from inside on ASA 5505

        Originally posted by plover2009 View Post
        Hi Andy,

        Thanks for the respons. Unfortant this was not the solution. All ping traffic is allowed. I use the asa 5505 with 2 ISP's

        Kind regards,

        Maarten

        Are you still having this issue? If I am understanding you correctly you have 2 ISP routable addresses configured on 2 ASA interfaces and you want to be able to ping both interfaces from you inside network. Are you performing any natting (whether static or dynamic)?

        Comment


        • #5
          Re: Ping own wan IP from inside on ASA 5505

          Hi ,

          Im sorry ofr the late respons. I still have this issue. You understand it corret is use static NAT

          Kind regards

          Comment


          • #6
            Re: Ping own wan IP from inside on ASA 5505

            If your natting is setup correctly make sure that on your outside interface you are allowing echo-replies to come back in through that interface.

            For example:

            access-list ping extended permit icmp any any echo-reply

            You will also have to make sure that you are allowing icmp traffic to leave your inside interface.

            If that still doesn't work can you post your config (scrub as needed) so that we can further assist you.

            Ryan

            Comment

            Working...
            X