SOLUTION-Basic ASA configuration but cannot ping from PC1 to PC3

 


I have done the basic ASA configuration and trying to ping from PC1 to PC3 but cannot ping.Please check the below configuration and guess why it is not pinging.

SOLUTION is at the end of this page.

ciscoasa# config t
ciscoasa(config)# int e0/0
ciscoasa(config-if)# nameif inside
INFO: Security level for "inside" set to 100 by default.
ciscoasa(config-if)# securit
ciscoasa(config-if)# security-level 100
ciscoasa(config-if)# ip address 192.168.1.1 255.255.255.0
ciscoasa(config-if)# no shutown


ciscoasa(config-if)# int e0/1
ciscoasa(config-if)# nameif DMZ
INFO: Security level for "DMZ" set to 0 by default.
ciscoasa(config-if)# SECURITy-level 50
ciscoasa(config-if)# ip addresses 192.168.50.1 255.255.255.0
ciscoasa(config-if)# no shutdown


ciscoasa(config-if)# int e0/2
ciscoasa(config-if)# nameif outside
INFO: Security level for "outside" set to 0 by default.
ciscoasa(config-if)# security-level 0
ciscoasa(config-if)# ip address 192.168.100.1 255.255.255.0
ciscoasa(config-if)# end


SOLUTION

ciscoasa# config t   
ciscoasa(config)# policy-map global_policy
ciscoasa(config-pmap)# class inspection_default
ciscoasa(config-pmap-c)# inspect icmp

After configuring the command inspect icmp in the policy-map global_policy the PC1 started pinging PC2.

No comments:

Post a Comment