[c-nsp] Wierd ICMP problem in ASA 5510

[Laurent Geyer]

On 12/28/06, Dave Lim <dave.daturax at gmail.com> wrote:
>
> Hi Group,
>
> I am facing a very wierd problem with my ASA 5510 allowing ICMP traffic
> from
> the inside to outside network.
>
> As you can see in the following, i can do a ICMP to the internet if I am
> in
> the console of the ASA (as seen in the first output) but I cant ICMP the
> internet if I am on the inside network (see second output)



 You either need to define an access-group for the outside interface with
access-list entries that permit ICMP, or turn on ICMP fixup.

- Laurent