We help IT Professionals succeed at work.

We've partnered with Certified Experts, Carl Webster and Richard Faulkner, to bring you two Citrix podcasts. Learn about 2020 trends and get answers to your biggest Citrix questions!Listen Now

x

How can I enable access the Cisco PIX outside NAT interface?

kennycpu
kennycpu asked
on
Medium Priority
223 Views
Last Modified: 2013-11-16
I setup one to one NAT from Cisco PIX, but I can't access or PING the ouside IP from internal network. Any Solution?
Comment
Watch Question

Pete LongTechnical Architect
CERTIFIED EXPERT
Distinguished Expert 2019

Commented:
outside ping is disabled by default

to turn it on toy need to add the following line to the config

icmp permit any echo outside

The ONLY way to manage a PIX from outside is via a VPN!! you need to enable a VPN to the firewall.
Les MooreSr. Systems Engineer
CERTIFIED EXPERT
Top Expert 2008

Commented:
>I can't access or PING the ouside IP from internal network
Correct. This is by design of the pix.
What exactly are you trying to access with this ? Provide more information. Also mention if this nat you have created is resolved using external dns server.

Cheers,
Rajesh

Author

Commented:
Of course I can ping outside IP from outside. I mean I cannot access the ouside NAT IP from inside network.

Author

Commented:
I am now using 2 DNS server, One for outside REAL IP setting. Another use for internal DNS server which set with internal LAN IP.
If you have the dns server internally for this REAL ip, then there is nothing that can be done. It is per design as Lrmoore stated.

Cheers,
Rajesh

Not the solution you were looking for? Getting a personalized solution is easy.

Ask the Experts
Les MooreSr. Systems Engineer
CERTIFIED EXPERT
Top Expert 2008

Commented:
Why shoot the messenger with a C grade (actually the 2nd messenger) just because you don't like the answer?

Don't expect anybody to answer your future questions if this is the way you judge them. First of all this has to be split and grade C just because it can't be done ? I don't own Cisco.

Access more of Experts Exchange with a free account
Thanks for using Experts Exchange.

Create a free account to continue.

Limited access with a free account allows you to:

  • View three pieces of content (articles, solutions, posts, and videos)
  • Ask the experts questions (counted toward content limit)
  • Customize your dashboard and profile

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.