Networknet archive Blog

Cisco PIX 501: Enable ICMP

Originally published Last updated 8 comments

By Ivan Versluis

The Cisco PIX 501 is one of my favourite hardware firewalls. I have a couple and am still using them in 2011. ICMP is usually disabled on these devices; the commands below enable it from the console or an SSH session.

Shell4 lines
1
2
3
4

pixfirewall# conf t
pixfirewall(config)# access-list ping_acl permit icmp any any
pixfirewall(config)# access-group ping_acl in interface outside
pixfirewall(config)# wr mem

That is all. It was not easy to configure this through PDM, and I prefer the console. Ping and tracert to google.com now work.

image

8 comments

Comments from the original WordPress site, kept read-only.

  6. Michael West

    When I issue the above command to enable ICMP, I lose remote connectivity to the device. I have ports 25 and 3389 open. Is this some sort of a priority issue?