Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 4 replies
  • Subscribers 2 subscribers
  • Views 14224 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Pinging hosts from outside/wan interface

francesco.russo
Hi,
I am trying to figure out how to let an internal pc, behind an SG105, receive a ping request from outside addresses. I cannot see any rule blocking the ping from outside, and in fact if I ping the lan interface 192.168.x.254 from a pc located on its wan interface, I succeed. But from the same pc I cannot do it to a pc which is behind the internal/lan interface 192.168.x.2. Moreover I cannot even see the requested dropped from the live logging. Does anyone know if this one is a misconfiguration rather than firmware known issue? Could you please help me fixing it?
Please keep in mind that in our configuration, we have multiple networks behind the LAN interface, but we do not want to use NAT, we instead want the firewall to route every requests. I accomplished to make this configuration work for every kind of traffic, except that for the ICMP.
Thank you in advance for any help.
Regards.


This thread was automatically locked due to age.
Parents
  • 0
    Hi,
    we finally understood how to solve the problem without NAT. You go into network protection-->Firewall-->ICMP and must unflag Allow ICMP through gateway. This option ovverride any previously icmp created rule allowing only icmp from an internal network. Then you go to firewall and create a rule to permit the ping from the outside. Et voilà.
    Thank you anyway for your assistance.
Reply
  • 0
    Hi,
    we finally understood how to solve the problem without NAT. You go into network protection-->Firewall-->ICMP and must unflag Allow ICMP through gateway. This option ovverride any previously icmp created rule allowing only icmp from an internal network. Then you go to firewall and create a rule to permit the ping from the outside. Et voilà.
    Thank you anyway for your assistance.
Children
No Data