PING, dmz to inside network, how???

[arqdennis]

I'm running the pix515 with version 4.4(8) of the sw. any examples/tips outthere on how to ping from the dmz to the inside and visa versa.

thanks,

ARQ.

 

[yizhar]

HI.

Try reading here

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_v44/pix44cfg/pix44cmd.htm

for the details about:
NAT
STATIC
CONDUIT

Read closely about the "no nat" configurations.

If you had a newer version, you could use nat 0 in conjuction with access-list, but it is not relevant to your ver.

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar

 

[ChrisAC]

It's not recommended to allow any connections from the DMZ to the inside, especially icmp traffic!!

Chris.
************************
Chris Andrew, CCNA
chrisac@gmx.co.uk
************************

 

[yizhar]

Yes, I agree.
DMZ servers should not be able to directly contact the inside.
That's the idea of DMZ.
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar