Cisco CLI – Allow ICMP through Cisco ASA

Problem
You cannot ping anything on the outside of the Cisco Asa firewall

Solution
From the CLI, create a class map and assign to a policy

ASA(config)# class-map icmp-class
ASA(config-cmap)# match default-inspection-traffic
ASA(config-cmap)# exit

ASA(config)# policy-map icmp_policy
ASA(config-pmap)# class icmp-class
ASA(config-pmap-c)# inspect icmp
ASA(config-pmap-c)# exit

Assign the policy to the outside interface

ASA(config)# service-policy icmp_policy interface outside

Tested Platform
Cisco ASA 5510

Hits: 106

Leave a Reply