Ping outside of a static from an inside host

Discussion in 'Cisco' started by R.B.P., May 1, 2004.

  1. R.B.P.

    R.B.P. Guest

    Hi

    I have a weird problem.
    I can't ping the outside IP address of a static translation
    from an inside host.

    Here my need:

    Outside IP address for host: a.b.c.10
    Inside IP address of host: x.y.z.5



    Here my conf.:

    ip address outside a.b.c.5 255.255.255.248
    ip address inside x.y.z.1 255.255.255.0

    static (inside,outside) a.b.c.10 x.y.z.5 netmask 255.255.255.255 0 0

    access-list outside permit icmp any any
    access-group outside in interface outside


    From an inside host x.y.z.35 I can of course ping x.y.z.5.
    But I'm unable to ping a.b.c.10 (the ext. IP address in the translation).

    Why can't I ping the external IP address ?


    BR

    R.B.P.
    R.B.P., May 1, 2004
    #1
    1. Advertising

  2. R.B.P.

    Ivan Ostres Guest

    In article <Xns94DC86CDE7303nospamthankscom@63.223.5.254>,
    says...
    > Hi
    >
    > I have a weird problem.
    > I can't ping the outside IP address of a static translation
    > from an inside host.
    >
    > Here my need:
    >
    > Outside IP address for host: a.b.c.10
    > Inside IP address of host: x.y.z.5
    >
    >
    >
    > Here my conf.:
    >
    > ip address outside a.b.c.5 255.255.255.248
    > ip address inside x.y.z.1 255.255.255.0
    >
    > static (inside,outside) a.b.c.10 x.y.z.5 netmask 255.255.255.255 0 0
    >
    > access-list outside permit icmp any any
    > access-group outside in interface outside
    >
    >
    > From an inside host x.y.z.35 I can of course ping x.y.z.5.
    > But I'm unable to ping a.b.c.10 (the ext. IP address in the translation).
    >
    > Why can't I ping the external IP address ?
    >
    >


    I think that it's question of rule that packet can pass just one time
    trough the same interface (and here it should do it 2 times - out of
    outside and than back in outside).


    --
    Ivan
    Ivan Ostres, May 1, 2004
    #2
    1. Advertising

  3. In article <Xns94DC86CDE7303nospamthankscom@63.223.5.254>,
    "R.B.P." <> wrote:

    > I can't ping the outside IP address of a static translation
    > from an inside host.


    That's not a weird problem, it's a very frequent question here.

    NAT only takes place when traffic is going from inside to outside or
    vice versa.

    --
    Barry Margolin,
    Arlington, MA
    *** PLEASE post questions in newsgroups, not directly to me ***
    Barry Margolin, May 1, 2004
    #3
    1. Advertising

Want to reply to this thread or ask your own question?

It takes just 2 minutes to sign up (and it's free!). Just click the sign up button to choose a username and then you can ask your own questions on the forum.

Share This Page