Networknet archive Blog

Cisco PIX 501: Enable ICMP

Originally published Last updated 8 comments

The Cisco PIX 501 is one of my favourite hardware firewalls. I have a couple and am still using them in 2011. ICMP is usually disabled on these devices. To enable it, sign in at the console or over SSH and run the following commands:

Shell4 lines
1
2
3
4

pixfirewall# conf t
pixfirewall(config)# access-list ping_acl permit icmp any any
pixfirewall(config)# access-group ping_acl in interface outside
pixfirewall(config)# wr mem

That is all. It was not easy to configure this through PDM, and I prefer the console. Ping and tracert to google.com now work.

image

8 comments

Comments from the original WordPress site, kept read-only.

  6. Michael West

    When I issue the above command to enable ICMP, I lose remote connectivity to the device. I have ports 25 and 3389 open. Is this some sort of a priority issue?