Networks

General discussion

Gravatar
Locked

icmp problem pix 525

By diegovgd ·
Hi ,i have a problem a pix, from network 10.10.10.xxx attempt to ping to the Internet and not found, I attach the configuration if someone can see the error
version 6.3(5) problem??

PIX Version 6.3(5)
interface ethernet0 auto
interface ethernet1 100full
interface ethernet2 100full
interface ethernet3 100full
interface ethernet4 100full
nameif ethernet0 failover security5
nameif ethernet1 Externa security0
nameif ethernet2 Ser_Ext security40
nameif ethernet3 inside security100
nameif ethernet4 Distribucion security20

access-list EXTERNA permit icmp any any


global (Externa) 2 xxx.xxx.xxx.98-xxx.xxx.xxx.102 netmask 255.255.255.248
global (Externa) 4 xxx.xxx.xxx.82-xxx.xxx.xxx.86 netmask 255.255.255.248
global (Externa) 5 xxx.xxx.xxx.90-xxx.xxx.xxx.94 netmask 255.255.255.248
global (Externa) 1 xxx.xxx.xxx.66-xxx.xxx.xxx.69 netmask 255.255.255.248
global (Externa) 3 xxx.xxx.xxx.74-xxx.xxx.xxx.76 netmask 255.255.255.248
global (Externa) 2 xxx.xxx.xxx.97 netmask 255.255.255.248
global (Externa) 1 xxx.xxx.xxx.65 netmask 255.255.255.248
global (Externa) 3 xxx.xxx.xxx.73 netmask 255.255.255.248
global (Externa) 4 xxx.xxx.xxx.81 netmask 255.255.255.248
global (Externa) 5 xxx.xxx.xxx.89 netmask 255.255.255.248

nat (inside) 0 access-list sin_nat_inside
nat (inside) 3 10.10.10.212 255.255.255.255 0 0
nat (inside) 2 10.10.10.250 255.255.255.255 0 0
nat (inside) 2 10.10.10.251 255.255.255.255 0 0
nat (inside) 3 10.10.10.0 255.255.255.0 0 0

static (inside,Externa) 10.10.10.21 10.10.10.21 netmask 255.255.255.255 0 0
static (inside,Externa) xxx.xxx.xxx.25 10.10.10.21 netmask 255.255.255.255 0 0

access-group EXTERNA in interface Externa

route Externa xxx.xxx.xxx.25 255.255.255.252 xxx.xxx.xxx.38 1

Can help me!!!

This conversation is currently closed to new comments.

1 total post (Page 1 of 1)  
+ Follow this Discussion ·
| Thread display: Collapse - | Expand +

All Comments

gravatar
Collapse -

If you repost this as a Question you'll get responses for this question

by HAL 9000 Moderator In reply to icmp problem pix 525

As people who look at the discussions don't always look at the Questions and vise versa. You'll also get a auto generated Response sent to you every time that some one posts a answer to your question so it's faster.

Col

Back to Networks Forum
1 total post (Page 1 of 1)  

Start or search

Related Forums