General discussion
May 12, 2008 at 04:33 AM
diegovgd

icmp problem pix 525

by diegovgd . Updated 18 years, 2 months ago

Hi ,i have a problem a pix, from network 10.10.10.xxx attempt to ping to the Internet and not found, I attach the configuration if someone can see the error
version 6.3(5) problem??

PIX Version 6.3(5)
interface ethernet0 auto
interface ethernet1 100full
interface ethernet2 100full
interface ethernet3 100full
interface ethernet4 100full
nameif ethernet0 failover security5
nameif ethernet1 Externa security0
nameif ethernet2 Ser_Ext security40
nameif ethernet3 inside security100
nameif ethernet4 Distribucion security20

access-list EXTERNA permit icmp any any

global (Externa) 2 xxx.xxx.xxx.98-xxx.xxx.xxx.102 netmask 255.255.255.248
global (Externa) 4 xxx.xxx.xxx.82-xxx.xxx.xxx.86 netmask 255.255.255.248
global (Externa) 5 xxx.xxx.xxx.90-xxx.xxx.xxx.94 netmask 255.255.255.248
global (Externa) 1 xxx.xxx.xxx.66-xxx.xxx.xxx.69 netmask 255.255.255.248
global (Externa) 3 xxx.xxx.xxx.74-xxx.xxx.xxx.76 netmask 255.255.255.248
global (Externa) 2 xxx.xxx.xxx.97 netmask 255.255.255.248
global (Externa) 1 xxx.xxx.xxx.65 netmask 255.255.255.248
global (Externa) 3 xxx.xxx.xxx.73 netmask 255.255.255.248
global (Externa) 4 xxx.xxx.xxx.81 netmask 255.255.255.248
global (Externa) 5 xxx.xxx.xxx.89 netmask 255.255.255.248

nat (inside) 0 access-list sin_nat_inside
nat (inside) 3 10.10.10.212 255.255.255.255 0 0
nat (inside) 2 10.10.10.250 255.255.255.255 0 0
nat (inside) 2 10.10.10.251 255.255.255.255 0 0
nat (inside) 3 10.10.10.0 255.255.255.0 0 0

static (inside,Externa) 10.10.10.21 10.10.10.21 netmask 255.255.255.255 0 0
static (inside,Externa) xxx.xxx.xxx.25 10.10.10.21 netmask 255.255.255.255 0 0

access-group EXTERNA in interface Externa

route Externa xxx.xxx.xxx.25 255.255.255.252 xxx.xxx.xxx.38 1

Can help me!!!

This discussion is locked

All Comments