Conduit permit icmp any any not working

[wayneker]

I can ping from my inside router and hosts but not from outside hosts back in, i have done a clear xlate, I'm using pat, logging shows the translation working but my router and hosts are not returning the ping according to the logging

 

[yizhar]

HI.

For access from outside to inside, you need BOTH a static nat mapping, and a conduit/access-list.

Read the pix documentation.

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar

 

[ChrisAC]

Spot on!!

What inside address were you trying to ping?? A private one??

Chris.
************************
Chris Andrew, CCNA
chrisac@gmx.co.uk
************************

 

[wayneker]

Yes its a private address, so as I have 4 hosts gaining access out to the Internet using a PAT address on the outside (which is still in a private network)I cannot ping any of the hosts from the outside without using static NAT's? that means I would need more addresses if I just wanted to test connectivity, shame. Thanks for your help anyway guys.

 

[ChrisAC]

Test connectivity from the inside! The inside hosts will be able to go out to the internet using PAT and the replies will come back from the outside to the inside using the dynamic port numbers! If they can get out, you've got connectivity! What exactly are you trying to prove?

Chris.
************************
Chris Andrew, CCNA
chrisac@gmx.co.uk
************************

 

[wayneker]

I appreciate that I have connectivity if my ping is returned, but I my Inside users cannot gain access to the internet through IExplorer, The inside hosts appear as 10.180.97.13/22 on the outside interface, all other hosts on the outside, in the same network range have internet access.

 

[ChrisAC]

You obviously have some TCP/IP problems! Can the inside network hosts ping the router? Is the router directly connected to the internet? Can you ping out from the router?

Could you post the router config?

Chris.
************************
Chris Andrew, CCNA
chrisac@gmx.co.uk
************************