How do you allow ICMP Echo Requests on a Cisco ASA 55xx Router?
I'm very new to managing Cisco equipment, so bear with me.
I'm configuring a Cisco ASA 5505 router for my office, and I am reasonably competent enough with the console to configure the basics -- our business needs are not extravagant. Our pings are being dropped by the router, however.
How do I configure the router to allow ICMP Echo Requests? Are there other types of ICMP requests that should be allowed? What are the potential downsides of allowing them all?
Solution 1:
Assuming that you haven't change the global_policy policy-map
, have an access-group from_outside on interface outside and that you want to allow icmp echo on the outside interface, here is what to type:
policy-map global_policy
class inspection_default
inspect icmp
exit
exit
access-list from_outside extended permit icmp any any echo
I would only allow echo request on outside interface.
You may also probably want to take a look to the ASDM