[c-nsp] PIX questions

[Rudy Setiawan]

Hi all,

I have a question about PIX translation

An outside interface has IP address:
192.168.1.2 255.255.255.0

An DMZ interface has IP address:
10.1.1.2 255.255.255.0


Current translation:
10.1.1.3 -> 192.168.1.3
10.1.1.4 -> 192.168.1.4


How can I make it so that 10.1.1.3 is able to ping the IP "192.168.1.4"?
How can I make it so that anyone behind 10.1.1.0/24 network is able to
ping the IP "192.168.1.4"?

Consider the ICMP is allowed any any.

I tried to configure it but the ASDM log say
"Deny IP Spoof From 192.168.1.2 to 192.168.1.4 on interface outside"

Thank you for your help in advance.

Regards,
Rudy