PIX515E - PING ACCESS ONLY

[humanslurpee]

<OUTSIDE PC>
|
<PIX BOX (eth0)>

<PIX BOX (eth1)>
|
<INSIDE PC>


OUTSIDE - 192.168.5.2
eth0 - 192.168.5.1

INSIDE - 192.168.0.1
eth1 - 192.168.0.2 (configuration PC)

ALL i need to do is be able to ping the outside PC from the inside PC, and NOT be able to ping the inside from the outside. NEED HELP ASAP!!!!!!!

 

[humanslurpee]

EDIT - this setup will NOT be connected to the internet, and i only need to be able to PING through the pix to the outside from the inside ; NOT ping through the pix to the inside.

 

[lgarner]

Unsolicited traffic isn't allowed from the outside to the inside interface. You need an access list entry to allow the ping replis to come in.

access-list outside_inbound permit icmp host <outside_pc> host <inside_pc> eq echo-reply

 

[themut]

The link below will help you understand how to handle ICMP traffic through the PIX:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a0080094e8a.shtml

 

[humanslurpee]

lgarner, that command didn't work at all, any way i tried it. want to explain?