How to able ping from Inside network to outside.

[rolman]

HI all, I have posted my cisco configuration befoer on thread557-1220119 (

http://www.tek-tips.com/viewthread.cfm?qid=1220119&page=1)

I have just added an access-list 101 and apply on the Serial0, facing the internet.

access-list 101 remark In-From-Out
access-list 101 deny icmp any any
access-list 101 permit ip any any

It works good that outside can't ping my internal. But I'm having problem pinging from the internal to out.

May I know how to configure inorder for my internal to ping out?

Pls kindly advice.

Million of Thanks
Rolman

 

[KiscoKid]

Change access list 101 so that it reads as follows:

access-list 101 permit icmp any any echo-reply
access-list 101 deny icmp any any
access-list 101 permit ip any any

This shuld do it for you.

If you want to also allow traceroute from inside to outside, add the following line:

access-list 101 permit icmp any any time-exceeded