My lab question, please help!

[Guest_imported]

Dear all,

I have obtained a key for my evaluation of CP2000 and have
set up a lab in my home. Belows are the details,


(172.16.0.1) (202.86.167.200)
Client----------------CP2000- Modem -------------------ISP
(172.16.0.2) (NT)

Since my key is generated based on the internal interface of my CP box, the belows are what I do for my firewall setting.

1. Enable IP forwarding in NT box and dial up to intenet.
2. Register the key with my CP2000
3. Create serveral objects below.
- Firewall object
- network object
4. Create Hide NAT of my network object
172.16.0.0/16 -> 202.86.167.200
5. create a rulebased allow any host to any dest
6. From my client box, ping the 202.86.167.200 and sucess,
But cant ping to other valid IP

What my goal is allow client can ping to external IP first so that I can test other feathers later.With my current hardware and key setting, I wonder can I do that? If yes, what I missed in my setting or any idea about that? Thanks a lot!


Yours regards,

IT Kid

 

[Piloria]

a couple of checks
1. create a rule that allows icmp-requests (not needed if you allow everything)
2. in global properties make sure that you have the Accept icmp requests box checked