<div>
Thank you so much for your fast reply. What is difference among them ? and command &quot;&nbsp;icmp permit host 172.16.2.15 outside&quot; also is allowed to ping. why does asa has other three commands ?
</div>


Thank you so much for your fast reply. What is difference among them ? and command " icmp permit host 172.16.2.15 outside" also is allowed to ping. why does asa has other three commands ?

<div>
<div class="content wysiwyg-content">
Hi Any one can explain the difference among following three highlighted in ASA. Thank you<br />
<br />
hostname(config)# icmp permit host 172.16.2.15 outside <br />
hostname(config)# icmp permit host 172.16.2.15 <b>echo</b> outside <br />
hostname(config)# icmp permit host 172.16.2.15 <b>echo-reply</b> outside <br />
hostname(config)# icmp permit any <b>unreachable</b> outside
</div>
</div>


Hi Any one can explain the difference among following three highlighted in ASA. Thank you

hostname(config)# icmp permit host 172.16.2.15 outside 
hostname(config)# icmp permit host 172.16.2.15 echo outside 
hostname(config)# icmp permit host 172.16.2.15 echo-reply outside 
hostname(config)# icmp permit any unreachable outside

echo, echo-reply and unreachable in ASA

Cisco PIX is a dedicated hardware firewall appliance; the Cisco Adaptive Security Appliance (ASA) is a firewall and anti-malware security appliance that provides unified threat management and protection the PIX does not. Other Cisco devices and systems include routers, switches, storage networking, wireless and the software and hardware for PIX Firewall Manager (PFM), PIX Device Manager (PDM) and Adaptive Security Device Manager (ASDM).

Cisco

A virtual private network (VPN) is a network that uses a public telecommunication infrastructure, such as the Internet, to provide remote offices or travelling users access to a central organizational network securely. VPNs encapsulate data transfers using secure cryptographic methods and other security mechanisms to ensure that only authorized users can access the network and that the data cannot be intercepted.