ICMP problems

[NetworkGuy101]

I am having problems with ICMP I am running a 515 with 6.1. I set up to allow ICMP through the PDM both ways. I really just want it to test then will tailor what I want after. What commands do I use on the CLI to get this done. I have tried the basic ones as far as access and conduits. Am I missing anything?

 

[shivanthan]

To allow ICMP all you have to do is, to allow the reply from the lower security interface.

If you have a DMZ setup, create or add the following access-list.

access-list Allow_ICMP permit icmp any any

access-group Allow_ICMP in interface outside
access-group Allow_ICMP in interface dmz

In this example, i have allowed all ICMP types, but only replies are enough for your requirement.

** unless you have the right Statics and NATs in place, this may not work.

Regards
Shivi