Can't ping ASA 5505 outside IF from inside 1

[countrytime]

On my ASA 5505 I can ping my inside IF but not the outside IF. I can ping

http://www and

external addresses and external addresses can ping my outside IF. What could be blocking me? I have allowed ICMP on that interface.

 

[CRS1]

Your ISP is blocking ICMP at their end.

 

[countrytime]

Actually, I'm on the inside network, so it isn't going through the ISP. External hosts can ping the outside interface but internal hosts can't.

 

[garnetbobcat]

By default the PIX does not allow you to ping or connect to a distant interface. I think that the "management-access" command will allow you to do this, but the fact that you can't is no need to worry.

management-access

http://www.cisco.com/en/US/docs/security/asa/asa72/command/reference/m_72.html#wp1794331

Matt
CCSP

http://www.wr-mem.com