General discussion

  • Creator
    Topic
  • #2146220

    icmp problem pix 525

    Locked

    by diegovgd ·

    Hi ,i have a problem a pix, from network 10.10.10.xxx attempt to ping to the Internet and not found, I attach the configuration if someone can see the error
    version 6.3(5) problem??

    PIX Version 6.3(5)
    interface ethernet0 auto
    interface ethernet1 100full
    interface ethernet2 100full
    interface ethernet3 100full
    interface ethernet4 100full
    nameif ethernet0 failover security5
    nameif ethernet1 Externa security0
    nameif ethernet2 Ser_Ext security40
    nameif ethernet3 inside security100
    nameif ethernet4 Distribucion security20

    access-list EXTERNA permit icmp any any

    global (Externa) 2 xxx.xxx.xxx.98-xxx.xxx.xxx.102 netmask 255.255.255.248
    global (Externa) 4 xxx.xxx.xxx.82-xxx.xxx.xxx.86 netmask 255.255.255.248
    global (Externa) 5 xxx.xxx.xxx.90-xxx.xxx.xxx.94 netmask 255.255.255.248
    global (Externa) 1 xxx.xxx.xxx.66-xxx.xxx.xxx.69 netmask 255.255.255.248
    global (Externa) 3 xxx.xxx.xxx.74-xxx.xxx.xxx.76 netmask 255.255.255.248
    global (Externa) 2 xxx.xxx.xxx.97 netmask 255.255.255.248
    global (Externa) 1 xxx.xxx.xxx.65 netmask 255.255.255.248
    global (Externa) 3 xxx.xxx.xxx.73 netmask 255.255.255.248
    global (Externa) 4 xxx.xxx.xxx.81 netmask 255.255.255.248
    global (Externa) 5 xxx.xxx.xxx.89 netmask 255.255.255.248

    nat (inside) 0 access-list sin_nat_inside
    nat (inside) 3 10.10.10.212 255.255.255.255 0 0
    nat (inside) 2 10.10.10.250 255.255.255.255 0 0
    nat (inside) 2 10.10.10.251 255.255.255.255 0 0
    nat (inside) 3 10.10.10.0 255.255.255.0 0 0

    static (inside,Externa) 10.10.10.21 10.10.10.21 netmask 255.255.255.255 0 0
    static (inside,Externa) xxx.xxx.xxx.25 10.10.10.21 netmask 255.255.255.255 0 0

    access-group EXTERNA in interface Externa

    route Externa xxx.xxx.xxx.25 255.255.255.252 xxx.xxx.xxx.38 1

    Can help me!!!

All Comments

  • Author
    Replies
    • #2456210

      If you repost this as a Question you’ll get responses for this question

      by hal 9000 ·

      In reply to icmp problem pix 525

      As people who look at the discussions don’t always look at the Questions and vise versa. You’ll also get a auto generated Response sent to you every time that some one posts a answer to your question so it’s faster.

      Col

Viewing 0 reply threads