TechRepublic|Forums|Networks

Networks

General discussion

  • Creator
    Topic
  • May 12, 2008 at 4:33 am #2146220

    icmp problem pix 525

    Locked

    by diegovgd · about 14 years ago

    Hi ,i have a problem a pix, from network 10.10.10.xxx attempt to ping to the Internet and not found, I attach the configuration if someone can see the error
    version 6.3(5) problem??

    PIX Version 6.3(5)
    interface ethernet0 auto
    interface ethernet1 100full
    interface ethernet2 100full
    interface ethernet3 100full
    interface ethernet4 100full
    nameif ethernet0 failover security5
    nameif ethernet1 Externa security0
    nameif ethernet2 Ser_Ext security40
    nameif ethernet3 inside security100
    nameif ethernet4 Distribucion security20

    access-list EXTERNA permit icmp any any

    global (Externa) 2 xxx.xxx.xxx.98-xxx.xxx.xxx.102 netmask 255.255.255.248
    global (Externa) 4 xxx.xxx.xxx.82-xxx.xxx.xxx.86 netmask 255.255.255.248
    global (Externa) 5 xxx.xxx.xxx.90-xxx.xxx.xxx.94 netmask 255.255.255.248
    global (Externa) 1 xxx.xxx.xxx.66-xxx.xxx.xxx.69 netmask 255.255.255.248
    global (Externa) 3 xxx.xxx.xxx.74-xxx.xxx.xxx.76 netmask 255.255.255.248
    global (Externa) 2 xxx.xxx.xxx.97 netmask 255.255.255.248
    global (Externa) 1 xxx.xxx.xxx.65 netmask 255.255.255.248
    global (Externa) 3 xxx.xxx.xxx.73 netmask 255.255.255.248
    global (Externa) 4 xxx.xxx.xxx.81 netmask 255.255.255.248
    global (Externa) 5 xxx.xxx.xxx.89 netmask 255.255.255.248

    nat (inside) 0 access-list sin_nat_inside
    nat (inside) 3 10.10.10.212 255.255.255.255 0 0
    nat (inside) 2 10.10.10.250 255.255.255.255 0 0
    nat (inside) 2 10.10.10.251 255.255.255.255 0 0
    nat (inside) 3 10.10.10.0 255.255.255.0 0 0

    static (inside,Externa) 10.10.10.21 10.10.10.21 netmask 255.255.255.255 0 0
    static (inside,Externa) xxx.xxx.xxx.25 10.10.10.21 netmask 255.255.255.255 0 0

    access-group EXTERNA in interface Externa

    route Externa xxx.xxx.xxx.25 255.255.255.252 xxx.xxx.xxx.38 1

    Can help me!!!

    Topic is locked This conversation is currently closed to new comments.
  • Creator
    Topic

All Comments

  • Author
    Replies
    • May 25, 2008 at 6:24 am #2456210

      If you repost this as a Question you’ll get responses for this question

      by hal 9000 · about 13 years, 11 months ago

      In reply to icmp problem pix 525

      As people who look at the discussions don’t always look at the Questions and vise versa. You’ll also get a auto generated Response sent to you every time that some one posts a answer to your question so it’s faster.

      Col

  • Author
    Replies
Viewing 0 reply threads