you have to disable icmp inspection to let the ping work
From: [email protected]
To: [email protected]
Date: Tue, 13 Sep 2011 09:16:32 +0000
Subject: [OSL | CCIE_Security] Multicast & ICMP
when I ping multicast address and therer is multicast group members behind the
firewall the firewall drop the replay packet because it is see echo-replay for
defrent echo request ,for example , we ping 224.0.32.1 and there is multicast
subscriber with ip 192.168.0.100 behiend ASA firewall ,we ping 224.0.32.1 from
172.16.1.100 the ping reach the client the clientwill replay with source add
192.168.0.100 , the firewall will drop the packet becuase it do not see
incoiming ping to this IP , so any one deal with this before ?
_______________________________________________
For more information regarding industry leading CCIE Lab training, please visit
www.ipexpert.com
Are you a CCNP or CCIE and looking for a job? Check out
www.PlatinumPlacement.com _______________________________________________
For more information regarding industry leading CCIE Lab training, please visit
www.ipexpert.com
Are you a CCNP or CCIE and looking for a job? Check out
www.PlatinumPlacement.com
