Tracert and Ping thru Pix

[hoinvip]

Hi, Can anyone help me?

I need to enable traceroute and ping though my pix 515e firewall and I'm having trouble with the Cisco instructions I've located. I know I need to set-up an access list and group but I'm having difficulty working out the correct syntax.

Cheers,

Peter

 

[123456789abc]

use this syntax
access-list 80 permit icmp any any 0
access-list 80 permit icmp any any 8
access-list 80 permit icmp any any 15
access-list 80 permit icmp any any 16
access-group 80 in interface outside

 

[hoinvip]

Great stuff, thanks I'll give it a try and get back to you. One question though... I already have an access list set-up for external connections through the firewall... will this conflict with it in any way?

Cheers,

Peter.

 

[123456789abc]

no it wont don't worry. All the best!

 

[yizhar]

HI.

You can apply only 1 access-list to each interface, so you should add the icmp rules to the existing acl.

You can use PDM or command line, whatever works best for you.

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar